Mysql: Warning Using a Password on the Command Line Interface Can Be Insecure.

As you might take noticed, y'all will exist prompted to enable VALIDATE PASSWORD component while setting upwardly password for MySQL root user. If enabled, the Validate Password component will automatically check the forcefulness of the given password and enforces the users to ready merely those passwords which are secure plenty. If you lot provide a weak password, yous will encounter with an error like this - Mistake 1819 (HY000): Your countersign does not satisfy the current policy requirements .

Technically speaking, information technology is not really an error. This is a built-in security machinery that notifies the users to provide only the stiff passwords based on the electric current password policy requirements.

Let me testify you an instance. I log in to MySQL server as root user using command:

$ mysql -u root -p

Create a database user with a weak password:

mysql> create user 'ostechnix'@'localhost' identified past 'mypassword';

And I meet with the post-obit fault:

ERROR 1819 (HY000): Your password does not satisfy the current policy requirements

ERROR 1819 (HY000): Your countersign does not satisfy the electric current policy requirements

See? The Validate Password component doesn't allow me to create a user with a weak password (i.e. mypassword in this case).

You will keep getting this mistake until the password meets the requirements of the electric current password policy or you disable the Validate Password component. We will see how to do information technology in the following department.

Fix - MySQL ERROR 1819 (HY000): Your password does non satisfy the current policy requirements

At that place are three levels of password validation policy enforced when Validate Countersign plugin is enabled:

• Low Length >= eight characters.
• MEDIUM Length >= 8, numeric, mixed case, and special characters.
• STRONG Length >= 8, numeric, mixed case, special characters and dictionary file.

Based on these policy levels, you demand to set an advisable countersign. For instance, if the countersign validation policy is set to Medium, yous must set a password that has at least 8 characters including a number, lowercase, upper-case letter and special characters.

Showtime we need to  find the electric current password policy level. To do so, run the post-obit command to show Countersign Validation Plugin organization variables:

mysql> SHOW VARIABLES Similar 'validate_password%';

Sample output:

+--------------------------------------+--------+ | Variable_name                        | Value  | +--------------------------------------+--------+ | validate_password.check_user_name    | ON     | | validate_password.dictionary_file    |        | | validate_password.length             | 8      | | validate_password.mixed_case_count   | one      | | validate_password.number_count       | 1      | | validate_password.policy             |                      MEDIUM                    | | validate_password.special_char_count | i      | +--------------------------------------+--------+ seven rows in prepare (0.09 sec)

Evidence password validation policy in mysql

As you tin run into, the currently enforced password level is Medium. So our password should be 8  characters long with a number, mixed example and special characters.

I am going to fix this password - Password123#@! using command:

mysql> create user 'ostechnix'@'localhost' identified past 'Password123#@!'; Query OK, 0 rows afflicted (0.36 sec)

Create a database user in mysql

See? Information technology works at present! Then, in order to prepare the "ERROR 1819 (HY000)..." error, you need to enter a password equally per the current password validation policy.

Change countersign validation policy in MySQL

Y'all can also solve the "Error 1819 (HY000)..." past setting upward a lower level countersign policy.

To do so, run the post-obit command from the mysql prompt:

mysql> SET GLOBAL validate_password.policy = 0;

Or,

mysql> SET GLOBAL validate_password.policy=LOW;

Then cheque if the password validation policy has been changed to low:

mysql> Prove VARIABLES LIKE 'validate_password%';

Sample output:

+--------------------------------------+-------+ | Variable_name                        | Value | +--------------------------------------+-------+ | validate_password.check_user_name    | ON    | | validate_password.dictionary_file    |       | | validate_password.length             | 8     | | validate_password.mixed_case_count   | 1     | | validate_password.number_count       | 1     | | validate_password.policy             |                      LOW                    | | validate_password.special_char_count | ane     | +--------------------------------------+-------+ 7 rows in set up (0.00 sec)

Now y'all tin create a user with a weak password like below:

mysql> create user 'senthil'@'localhost' identified by 'password';

Modify password validation policy in mysql

To revert dorsum to MEDIUM level policy, only run this command from mysql prompt:

mysql> Set GLOBAL validate_password.policy=MEDIUM;

If the password policy doesn't change, leave from the mysql prompt and restart mysql service from your Terminal window:

$ sudo systemctl restart mysql

Now it should work.

Heads Up: Ane of our reader has pointed out that there is typo in the following command:

mysql> SET GLOBAL validate_password.policy=Depression;

It should exist:

mysql> Gear up GLOBAL validate_password_policy=Depression;

Note the underscore in the to a higher place control. Since I have deleted the setup, I have no way of verifying this command. But I assume the command has been inverse in the newer versions of MySQL.

Disable password validation policy

If you like to create users with weak password, simply disable the Validate Countersign component altogether and re-enable it back later creating the users.

Log in to the MySQL server:

$ mysql -u root -p

To temporarily disable Validate Password component, run the post-obit command from MySQL prompt:

mysql> UNINSTALL COMPONENT "file://component_validate_password";

Create the users with any password of your choice:

mysql> create user 'kumar'@'localhost' identified by '123456';

Finally, enable Validate Password component:

mysql> INSTALL COMPONENT "file://component_validate_password";

Disable password validation policy temporarily in mysql

I personally don't recommend irresolute the policy to lower level or disabling countersign policy. Be it a database user or normal user, e'er use a strong countersign with more than 8 characters including a number, mixed case, and spacial characters.

Conclusion

In this guide, we learned virtually one of the mutual MySQL error - Mistake 1819 (HY000): Your countersign does non satisfy the current policy requirements and how to fix it in Linux.

parkerthiscrund.blogspot.com

Source: https://ostechnix.com/fix-mysql-error-1819-hy000-your-password-does-not-satisfy-the-current-policy-requirements/

Share this post