froscon2009 - 1.0

FrOSCon
Free and Open Source Software Conference

Speakers
Darren Cassar
Schedule
Day Day 2 (2009-08-23)
Room C120/OpenSQLCamp
Start time 11:15
Duration 01:00
Info
ID 454
Event type Lecture
Track OpenSQLCamp
Language used for presentation English
Feedback

Securich - MySQL user administration and security made easy!

Securich - The security plugin for MySQL user rights management.

How often do you wonder "What privileges does user xyz have globally?", "Do all my users have a decent password?" and "When was it changed last?", whilst hoping they weren't cycling through the usual three passwords just because they were lazy to remember a new one, or "Who has access to table 'passwords' in database 'livedb'". Maybe you have occasionally granted full access to all tables in a database just because it's a pain in the back to grant on tables one by one, or wondered about the mess your users and their privileges were in. Did you ever wish you could clone user 'abc'@'localhost' out of 'xyz'@'%.my.domain.com'? then, perhaps, Securich (http://www.securich.com) can come to your rescue because. It can easily tackle all the above and much more. Securich also enables the long absent roles functionality in MySQL, permits dynamic updating of roles and immediate rollout of the changes to each user.

Securich - The security plugin for MySQL user rights management.

How often do you wonder "What privileges does user xyz have globally (I.E. on databases, tables and stored procs)?", "Do all my users have a decent password?" and "When was it changed last?", whilst hoping they weren't cycling through the usual three passwords just because they were lazy to remember a new one, or "Who has access to table 'passwords' in database 'livedb'". Maybe you have occasionally granted full access to all tables in a database just because it's a pain in the back to grant on tables one by one, or wondered about the mess your users and their privileges were in. Did you ever wish you could clone user 'abc'@'localhost' out of 'xyz'@'%.my.domain.com'? then, perhaps, Securich (http://www.securich.com) can come to your rescue. It can easily tackle the above and much more. Securich also enables the long absent roles functionality in MySQL, permits dynamic updating of roles and immediate rollout of the changes to each user.

Securich is very simple to install and update using a bash script which includes error catching and rollback (should there be a problem). Securich is also easy to remove if required, a single command "drop securich" does the trick and doesn't change any of the rights granted to users through it.

Features: Roles / groups Password history / updating User cloning Dynamic roles Secured user (avoiding password less accounts) Password guidelines The possibility to grant access to all tables in a database but one in two commands Partial privilege history User blocking / unblocking Total isolation of users if need be