simple_password_check_digits
This page is part of MariaDB's Documentation.
The parent of this page is: System Variables for MariaDB Enterprise Server
Topics on this page:
Overview
Minimal required number of digits
USAGE
The simple_password_check_digits
system variable can have its default value configured via SkySQL Configuration Manager.
The simple_password_check_digits
system variable can only be set if the simple_
The simple_password_check_digits
system variable can be set in a configuration file:
[mariadb]
plugin_load_add=simple_password_check
simple_password_check_digits=3
The simple_password_check_digits
system variable can also be set dynamically at runtime by executing SET GLOBAL:
SET GLOBAL simple_password_check_digits=3;
When the simple_password_check_digits
system variable is set dynamically at runtime, its value will be reset the next time the server restarts. To make the value persist on restart, set it in a configuration file too.
DETAILS
The simple_password_check_digits
system variable is one of the system variables that controls how the simple_
If a user tries to create a user account with the CREATE USER or GRANT statements and the password has fewer digit characters than the configured value, then the password will be rejected, and the user account will not be created.
If a user tries to set a user account password with the SET PASSWORD, ALTER USER, or GRANT statements and the password has fewer digit characters than the configured value, then the password will be rejected, and the user account password will not be changed.
A digit character is any character in the range 0-9.
SYNONYMS
SCHEMA
PARAMETERS
Command-line | --simple_password_check_digits=# |
Configuration file | Supported |
Dynamic | Yes |
Scope | Global |
Data Type | INT UNSIGNED |
Minimum Value | 0 |
Maximum Value | 1000 |
Product Default Value | 1 |
SKYSQL
Cloud | SkySQL Topology | ES Ver | Service Default |
---|---|---|---|
AWS | Multi-Node Analytics | 10.6 | 1 (choices: 0, 1, 2, 5, 10) |
Single Node Analytics | 10.6 | 1 (choices: 0, 1, 2, 5, 10) | |
Replicated Transactions | 10.4 | 1 (choices: 0, 1, 2, 5, 10) | |
10.5 | 1 (choices: 0, 1, 2, 5, 10) | ||
10.6 | 1 (choices: 0, 1, 2, 5, 10) | ||
Single Node Transactions | 10.4 | 1 (choices: 0, 1, 2, 5, 10) | |
10.5 | 1 (choices: 0, 1, 2, 5, 10) | ||
10.6 | 1 (choices: 0, 1, 2, 5, 10) | ||
GCP | Multi-Node Analytics | 10.6 | 1 (choices: 0, 1, 2, 5, 10) |
Single Node Analytics | 10.6 | 1 (choices: 0, 1, 2, 5, 10) | |
Replicated Transactions | 10.4 | 1 (choices: 0, 1, 2, 5, 10) | |
10.5 | 1 (choices: 0, 1, 2, 5, 10) | ||
10.6 | 1 (choices: 0, 1, 2, 5, 10) | ||
Single Node Transactions | 10.4 | 1 (choices: 0, 1, 2, 5, 10) | |
10.5 | 1 (choices: 0, 1, 2, 5, 10) | ||
10.6 | 1 (choices: 0, 1, 2, 5, 10) |
Cloud | SkySQL Topology | ES Ver | Service Default |
---|---|---|---|
AWS | ColumnStore Data Warehouse | 10.6 | 1 (choices: 0, 1, 2, 5, 10) |
Enterprise Server With Replica(s) | 10.4 | 1 (choices: 0, 1, 2, 5, 10) | |
10.5 | 1 (choices: 0, 1, 2, 5, 10) | ||
10.6 | 1 (choices: 0, 1, 2, 5, 10) | ||
Enterprise Server Single Node | 10.4 | 1 (choices: 0, 1, 2, 5, 10) | |
10.5 | 1 (choices: 0, 1, 2, 5, 10) | ||
10.6 | 1 (choices: 0, 1, 2, 5, 10) | ||
GCP | ColumnStore Data Warehouse | 10.6 | 1 (choices: 0, 1, 2, 5, 10) |
Enterprise Server With Replica(s) | 10.4 | 1 (choices: 0, 1, 2, 5, 10) | |
10.5 | 1 (choices: 0, 1, 2, 5, 10) | ||
10.6 | 1 (choices: 0, 1, 2, 5, 10) | ||
Enterprise Server Single Node | 10.4 | 1 (choices: 0, 1, 2, 5, 10) | |
10.5 | 1 (choices: 0, 1, 2, 5, 10) | ||
10.6 | 1 (choices: 0, 1, 2, 5, 10) |
See SkySQL details in MariaDB SkySQL previous release
See SkySQL details in MariaDB SkySQL new release
PRIVILEGES
The simple_password_check_digits
system variable requires the SUPER
privilege to dynamically set its value at runtime.
EXAMPLES
Dependence on Simple Password Check Plugin
The simple_password_check_digits
system variable can only be set if the simple_
To check if this plugin is installed, execute the following:
SELECT PLUGIN_NAME, PLUGIN_STATUS, PLUGIN_LIBRARY, LOAD_OPTION
FROM information_schema.PLUGINS
WHERE PLUGIN_NAME='simple_password_check';
+-----------------------+---------------+--------------------------+-------------+
| PLUGIN_NAME | PLUGIN_STATUS | PLUGIN_LIBRARY | LOAD_OPTION |
+-----------------------+---------------+--------------------------+-------------+
| simple_password_check | ACTIVE | simple_password_check.so | ON |
+-----------------------+---------------+--------------------------+-------------+
If the plugin is not installed, then referencing the system variable will raise an error with the ER_
SET GLOBAL simple_password_check_digits=3;
ERROR 1193 (HY000): Unknown system variable 'simple_password_check_digits'
Invalid Password
If a password has fewer "digit" characters than the value of the simple_password_check_digits
system variable, then an error with the ER_
SHOW GLOBAL VARIABLES LIKE 'simple_password_check_digits';
+------------------------------+-------+
| Variable_name | Value |
+------------------------------+-------+
| simple_password_check_digits | 3 |
+------------------------------+-------+
SET PASSWORD = PASSWORD('$securePW12');
ERROR 1819 (HY000): Your password does not satisfy the current policy requirements
SET PASSWORD = PASSWORD('$securePW123');
Automatic Adjustment of Minimal Length
The value of the simple_
If one of these system variables is set to some value that causes simple_
SET GLOBAL simple_password_check_minimal_length=8;
SET GLOBAL simple_password_check_digits=3;
SET GLOBAL simple_password_check_letters_same_case=2;
SET GLOBAL simple_password_check_other_characters=3;
SHOW WARNINGS;
+---------+------+-------------------------------------------------------------------------+
| Level | Code | Message |
+---------+------+-------------------------------------------------------------------------+
| Warning | 1292 | Adjusted the value of simple_password_check_minimal_length from 8 to 10 |
+---------+------+-------------------------------------------------------------------------+
Dynamically Resetting Global Value to Default
The global value of the simple_password_check_digits
system variable can be dynamically reset to the default value by setting it to DEFAULT
:
SET GLOBAL simple_password_check_digits=3;
SHOW GLOBAL VARIABLES LIKE 'simple_password_check_digits';
+------------------------------+-------+
| Variable_name | Value |
+------------------------------+-------+
| simple_password_check_digits | 3 |
+------------------------------+-------+
SET GLOBAL simple_password_check_digits=DEFAULT;
SHOW GLOBAL VARIABLES LIKE 'simple_password_check_digits';
+------------------------------+-------+
| Variable_name | Value |
+------------------------------+-------+
| simple_password_check_digits | 1 |
+------------------------------+-------+
Invalid Value for Variable
If a user tries to set the simple_password_check_digits
system variable to an invalid value, then the specific behavior depends on the value of the sql_
If the sql_STRICT_ALL_TABLES
and a user tries to set the simple_password_check_digits
system variable to an invalid value, then the operation will appear to succeed, but a warning will be raised with the ER_
SET GLOBAL simple_password_check_digits=-1;
SHOW WARNINGS;
+---------+------+--------------------------------------------------------------+
| Level | Code | Message |
+---------+------+--------------------------------------------------------------+
| Warning | 1292 | Truncated incorrect simple_password_check_digits value: '-1' |
+---------+------+--------------------------------------------------------------+
SHOW GLOBAL VARIABLES LIKE 'simple_password_check_digits';
+------------------------------+-------+
| Variable_name | Value |
+------------------------------+-------+
| simple_password_check_digits | 0 |
+------------------------------+-------+
SET GLOBAL simple_password_check_digits=1001;
SHOW WARNINGS;
+---------+------+---------------------------------------------------------------------------+
| Level | Code | Message |
+---------+------+---------------------------------------------------------------------------+
| Warning | 1292 | Truncated incorrect simple_password_check_digits value: '1001' |
| Warning | 1292 | Adjusted the value of simple_password_check_minimal_length from 8 to 1003 |
+---------+------+---------------------------------------------------------------------------+
SHOW GLOBAL VARIABLES LIKE 'simple_password_check_digits';
+------------------------------+-------+
| Variable_name | Value |
+------------------------------+-------+
| simple_password_check_digits | 1000 |
+------------------------------+-------+
If the sql_STRICT_ALL_TABLES
and a user tries to set the simple_password_check_digits
system variable to an invalid value, then the operation will fail with the ER_
SHOW SESSION VARIABLES LIKE 'sql_mode';
+---------------+-------------------------------------------------------------------------------------------+
| Variable_name | Value |
+---------------+-------------------------------------------------------------------------------------------+
| sql_mode | STRICT_TRANS_TABLES,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION |
+---------------+-------------------------------------------------------------------------------------------+
SET SESSION sql_mode=CONCAT(@@session.sql_mode, ',STRICT_ALL_TABLES');
SET GLOBAL simple_password_check_digits=-1;
ERROR 1231 (42000): Variable 'simple_password_check_digits' can't be set to the value of '-1'
Invalid Type for Variable
If a user tries to set the simple_password_check_digits
system variable to an invalid argument, then the operation will fail with the ER_
SET GLOBAL simple_password_check_digits='';
ERROR 1232 (42000): Incorrect argument type to variable 'simple_password_check_digits'
SET GLOBAL simple_password_check_digits='infinity';
ERROR 1232 (42000): Incorrect argument type to variable 'simple_password_check_digits'
ERROR HANDLING
FEATURE INTERACTION
RESPONSES
DIAGNOSIS
ISO 9075:2016
CHANGE HISTORY
Release Series | History |
---|---|
11.4 Enterprise |
|
10.6 Enterprise |
|
10.6 Community |
|
10.5 Enterprise |
|
10.5 Community |
|
10.4 Enterprise |
|
10.4 Community |
|
10.3 Enterprise |
|
10.3 Community |
|
10.2 Enterprise |
|
10.2 Community |
|
Release Series | History |
---|---|
11.4 Enterprise |
|
10.6 Enterprise |
|
10.5 Enterprise |
|
10.4 Enterprise |
|