A.9 MySQL 8.0 FAQ: Security

A.9.1. Where can I find documentation that addresses security issues for MySQL?
A.9.2. What is the default authentication plugin in MySQL 8.0?
A.9.3. Does MySQL 8.0 have native support for SSL?
A.9.4. Is SSL support built into MySQL binaries, or must I recompile the binary myself to enable it?
A.9.5. Does MySQL 8.0 have built-in authentication against LDAP directories?
A.9.6. Does MySQL 8.0 include support for Roles Based Access Control (RBAC)?

A.9.1.	Where can I find documentation that addresses security issues for MySQL?
	The best place to start is Chapter 6, Security. Other portions of the MySQL Documentation which you may find useful with regard to specific security concerns include the following: Section 6.1.1, “Security Guidelines”. Section 6.1.3, “Making MySQL Secure Against Attackers”. Section B.6.3.2, “How to Reset the Root Password”. Section 6.1.5, “How to Run MySQL as a Normal User”. Section 29.4.2.6, “UDF Security Precautions”. Section 6.1.4, “Security-Related mysqld Options and Variables”. Section 6.1.6, “Security Issues with LOAD DATA LOCAL”. Section 2.10, “Postinstallation Setup and Testing”. Section 6.4, “Using Encrypted Connections”.
A.9.2.	What is the default authentication plugin in MySQL 8.0?
	The default authentication plugin in MySQL 8.0 is `caching_sha2_password`. For information about this plugin, see Section 6.5.1.3, “Caching SHA-2 Pluggable Authentication”. The `caching_sha2_password` plugin provides more secure password encryption than the `mysql_native_password` plugin (the default plugin in previous MySQL series). For information about the implications of this change of default plugin for server operation and compatibility of the server with clients and connectors, see caching_sha2_password as the Preferred Authentication Plugin. For general information about pluggable authentication and other available authentication plugins, see Section 6.3.10, “Pluggable Authentication”, and Section 6.5.1, “Authentication Plugins”.
A.9.3.	Does MySQL 8.0 have native support for SSL?
	Most 8.0 binaries have support for SSL connections between the client and server. See Section 6.4, “Using Encrypted Connections”. You can also tunnel a connection using SSH, if (for example) the client application does not support SSL connections. For an example, see Section 6.4.7, “Connecting to MySQL Remotely from Windows with SSH”.
A.9.4.	Is SSL support built into MySQL binaries, or must I recompile the binary myself to enable it?
	Most 8.0 binaries have SSL enabled for client/server connections that are secured, authenticated, or both. See Section 6.4, “Using Encrypted Connections”.
A.9.5.	Does MySQL 8.0 have built-in authentication against LDAP directories?
	The Enterprise edition includes a PAM Authentication Plugin that supports authentication against an LDAP directory.
A.9.6.	Does MySQL 8.0 include support for Roles Based Access Control (RBAC)?
	Not at this time.

Rechercher dans le manuel MySQL

Traduction non disponible

Le manuel MySQL n'est pas encore traduit en français sur l'infobrol. Seule la version anglaise est disponible pour l'instant.

Document créé le 26/06/2006, dernière modification le 26/10/2018
Source du document imprimé : https://www.gaudry.be/mysql-rf-faqs-security.html

L'infobrol est un site personnel dont le contenu n'engage que moi. Le texte est mis à disposition sous licence CreativeCommons(BY-NC-SA). Plus d'info sur les conditions d'utilisation et sur l'auteur.

Références

Manuel MySQL : https://dev.mysql.com/

Ces références et liens indiquent des documents consultés lors de la rédaction de cette page, ou qui peuvent apporter un complément d'information, mais les auteurs de ces sources ne peuvent être tenus responsables du contenu de cette page.
L'auteur de ce site est seul responsable de la manière dont sont présentés ici les différents concepts, et des libertés qui sont prises avec les ouvrages de référence. N'oubliez pas que vous devez croiser les informations de sources multiples afin de diminuer les risques d'erreurs.

Table des matières Haut