froscon2009 - 1.0

FrOSCon
Free and Open Source Software Conference

Referenten
Darren Cassar
Programm
Tag Day 2 (2009-08-23)
Raum C120/OpenSQLCamp
Beginn 11:15
Dauer 01:00
Info
ID 454
Veranstaltungstyp Vortrag
Track OpenSQLCamp
Sprache der Veranstaltung englisch
Feedback

Securich - MySQL user administration and security made easy!

Securich - The security plugin for MySQL user rights management.

How often do you wonder "What privileges does user xyz have globally?", "Do all my users have a decent password?" and "When was it changed last?", whilst hoping they weren't cycling through the usual three passwords just because they were lazy to remember a new one, or "Who has access to table 'passwords' in database 'livedb'". Maybe you have occasionally granted full access to all tables in a database just because it's a pain in the back to grant on tables one by one, or wondered about the mess your users and their privileges were in. Did you ever wish you could clone user 'abc'@'localhost' out of 'xyz'@'%.my.domain.com'? then, perhaps, Securich (http://www.securich.com) can come to your rescue because. It can easily tackle all the above and much more. Securich also enables the long absent roles functionality in MySQL, permits dynamic updating of roles and immediate rollout of the changes to each user.

Securich - The security plugin for MySQL user rights management.

How often do you wonder "What privileges does user xyz have globally (I.E. on databases, tables and stored procs)?", "Do all my users have a decent password?" and "When was it changed last?", whilst hoping they weren't cycling through the usual three passwords just because they were lazy to remember a new one, or "Who has access to table 'passwords' in database 'livedb'". Maybe you have occasionally granted full access to all tables in a database just because it's a pain in the back to grant on tables one by one, or wondered about the mess your users and their privileges were in. Did you ever wish you could clone user 'abc'@'localhost' out of 'xyz'@'%.my.domain.com'? then, perhaps, Securich (http://www.securich.com) can come to your rescue. It can easily tackle the above and much more. Securich also enables the long absent roles functionality in MySQL, permits dynamic updating of roles and immediate rollout of the changes to each user.

Securich is very simple to install and update using a bash script which includes error catching and rollback (should there be a problem). Securich is also easy to remove if required, a single command "drop securich" does the trick and doesn't change any of the rights granted to users through it.

Features: Roles / groups Password history / updating User cloning Dynamic roles Secured user (avoiding password less accounts) Password guidelines The possibility to grant access to all tables in a database but one in two commands Partial privilege history User blocking / unblocking Total isolation of users if need be

Anhängte Dateien