Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Failed-Login Tracking and Temporary Account Locking #49

Open
martinwalle opened this issue Oct 28, 2020 · 5 comments · May be fixed by #62
Open

Failed-Login Tracking and Temporary Account Locking #49

martinwalle opened this issue Oct 28, 2020 · 5 comments · May be fixed by #62

Comments

@martinwalle
Copy link

SUMMARY

Implement the feature Failed-Login Tracking and Temporary Account Locking

ISSUE TYPE
  • Feature Idea
COMPONENT NAME

mysql_user module

ADDITIONAL INFORMATION

It will improve the security and avoid some kind of attacks.

- name: Lock bob's account when 4 consecutive login attempt failed for unbounded time
  community.mysql.mysql_user:
    name: bob
    account_locking:
      FAILED_LOGIN_ATTEMPTS: 4
      PASSWORD_LOCK_TIME: UNBOUNDED
@Andersson007
Copy link
Collaborator

@martinwalle hi, thanks for the idea! I'm not an expert but sounds good to me.
@Jorge-Rodriguez what do you think? would you like to implement this?

@Jorge-Rodriguez
Copy link
Contributor

@Andersson007 sure, I'll give this a go

@Andersson007
Copy link
Collaborator

Andersson007 commented Oct 28, 2020 •
edited
Loading

@Jorge-Rodriguez and don't hesitate to put yourself in the authors lists of things you're improving;)

@Jorge-Rodriguez
Copy link
Contributor

Note: this is supported only by MySQL >= 8.0.19
MariaDB does not support this feature.

MariaDB can offer similar functionality via the max_password_errors server variable. This collection's variables module should be used to this end.

@Andersson007
Copy link
Collaborator

we should add a check then. There is already a function for that in the module, as far as i remember. And we should add a note about that to the doc as well

@Jorge-Rodriguez Jorge-Rodriguez linked a pull request Nov 17, 2020 that will close this issue
Draft
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

login tracking [Temporarily frozen] Jorge-Rodriguez/community.mysql
3 participants
@Jorge-Rodriguez @Andersson007 @martinwalle