Page 1 of 1

I need stronger authentication for users then password()

Posted: Thu May 12, 2016 11:05 am
by codolom
Hi,
I've got authentication problem.

Code: Select all

create user 'uname'@'host' identified by password('secretpass');
works fine, but I want to change password() to another (for example sha2('secretpass', 512).
I have not found solution on google, but some info:
mysql uses own password hashing function: password()
I hope that's possible to change it in mariadb.
Are there any solution for that?
Thanks for answers,
cod

Re: I need stronger authentication for users then password()

Posted: Fri May 13, 2016 7:43 am
by prupert
A password is a password. If you need stronger authentication, than use something else (or additionally to the password) as authentication. In any MySQL flavour, also MariaDB, you use password() for password hashing, see https://mariadb.com/kb/en/mariadb/password/.

Protip: firewall your MySQL server.

Re: I need stronger authentication for users then password()

Posted: Fri May 13, 2016 10:09 am
by codolom
Thanks.

I've tried to set up ssl for mariadb using a source on net, but failed.

Code: Select all

MariaDB [(none)]> \s
...
SSL: not in use
...
Connection: via unix socket
...
It doesn't matter, but after restart linux I've got an error: "Internal system error."
I've to do something to fix.
If you need info to help, please ask, cause I don't know where can be the problem.