{"id":6354,"date":"2017-09-22T15:27:36","date_gmt":"2017-09-22T14:27:36","guid":{"rendered":"http:\/\/blog.capdata.fr\/?p=6354"},"modified":"2019-09-13T12:56:47","modified_gmt":"2019-09-13T11:56:47","slug":"default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10","status":"publish","type":"post","link":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/","title":{"rendered":"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10"},"content":{"rendered":"\"twitter\"<\/a>\"linkedin\"<\/a>\"mail\"<\/a>

Petite piq\u00fbre de rappel pour tous ceux qui se trouvent entre ces deux releases, la valeur du param\u00e8tre default_password_lifetime<\/i> est fix\u00e9e \u00e0 360 par d\u00e9faut, ce qui signifie que si vous n’avez pas pr\u00e9cis\u00e9 la clause PASSWORD EXPIRE NEVER dans CREATE USER ou ALTER USER, le mot de passe expirera effectivement au bout de 360 jours, jolie bombe \u00e0 retardement toutes topologies confondues (r\u00e9plication 5.6->5.7). Y compris pour root@localhost:<\/p>\n

mysql> select version() as 'Version', user, host, password_lifetime from mysql.user where user='root' ;\r\n+----------+------+-----------+-------------------+\r\n| Version  | user | host      | password_lifetime |\r\n+----------+------+-----------+-------------------+\r\n| 5.7.10-3 | root | localhost | NULL              |\r\n+----------+------+-----------+-------------------+\r\n1 row in set (0.00 sec)<\/pre>\n
Lorsque mysql.user.password_lifetime est \u00e0 NULL, la valeur qui s’applique est celle du param\u00e8tre:<\/p>\n
mysql> select @@default_password_lifetime ;\r\n+-----------------------------+\r\n| @@default_password_lifetime |\r\n+-----------------------------+\r\n| 360                         |\r\n+-----------------------------+\r\n1 row in set (0.02 sec)<\/pre>\n
La doc officielle Oracle pr\u00e9cise que la valeur a \u00e9t\u00e9 repass\u00e9e \u00e0 0 \u00e0 partir de la 5.7.11 :\u00a0https:\/\/dev.mysql.com\/doc\/refman\/5.7\/en\/server-system-variables.html#sysvar_default_password_lifetime<\/a><\/p>\n
Si vous \u00eates concern\u00e9s et que vous ne voulez pas (\u00e0 priori) que vos mots de passe expirent :<\/p>\n
1) Passer le param\u00e8tre default_password_lifetime \u00e0 0 en global et dans le fichier de conf (les variables persist\u00e9es sont toujours attendues pour la 8.0 : http:\/\/mysqlserverteam.com\/mysql-8-0-persisting-configuration-variables\/<\/a>):<\/p>\n
mysql> SET GLOBAL default_password_lifetime=0 ;\r\nQuery OK, 0 rows affected (0.02 sec)\r\n\r\n...\r\n\r\n$ grep lifetime \/path\/to\/my.cnf\r\ndefault_password_lifetime=0<\/pre>\n
2) Modifier tous les comptes concern\u00e9s :<\/p>\n
mysql> ALTER USER 'root'@'localhost' PASSWORD EXPIRE NEVER ;\r\nQuery OK, 0 rows affected (0.08 sec)\r\n\r\nmysql> select version() as 'Version', user, host, password_lifetime from mysql.user where user='root' ;\r\n+----------+------+-----------+-------------------+\r\n| Version | user  | host      | password_lifetime |\r\n+----------+------+-----------+-------------------+\r\n| 5.7.10-3 | root | localhost | 0                 |\r\n+----------+------+-----------+-------------------+\r\n1 row in set (0.00 sec)<\/pre>\n
Si votre mot de passe a d\u00e9j\u00e0 expir\u00e9 un joli message d’erreur s’affichera:<\/p>\n
ERROR 1820 (HY000): You must reset your password using ALTER USER statement before executing this statement.<\/pre>\n
Et il faudra r\u00e9initialiser le mot de passe en plus de modifier les param\u00e8tres pr\u00e9c\u00e9demment cit\u00e9s. <\/p>\n
Un bug (#77277<\/a>) est ouvert en juin 2015, ce sur quoi Morgan Tocker himself conclue en pr\u00e9cisant qu’il est dans la politique d’Oracle de s\u00e9curiser par d\u00e9faut (cf le profil par d\u00e9faut en Oracle 11g qui expire au bout de 180 jours et sur lequel \u00e0 peu pr\u00e8s tout le monde s’est cass\u00e9 les dents suite migration 10g -> 11g), et que le param\u00e8tre pourrait repasser \u00e0 une valeur positive dans les futures releases. Il faudra donc garder l’oeil ouvert et bien lire les release notes \u00e0 chaque nouvelle version. <\/p>\n
A+<\/p>\n\"twitter\"<\/a>\"linkedin\"<\/a>\"mail\"<\/a>","protected":false},"excerpt":{"rendered":"
Petite piq\u00fbre de rappel pour tous ceux qui se trouvent entre ces deux releases, la valeur du param\u00e8tre default_password_lifetime est fix\u00e9e \u00e0 360 par d\u00e9faut, ce qui signifie que si vous n’avez pas pr\u00e9cis\u00e9 la clause PASSWORD EXPIRE NEVER dans… Continuer la lecture →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":7809,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-6354","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mysql"],"yoast_head":"\ndefault_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10 - Capdata TECH BLOG<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10 - Capdata TECH BLOG\" \/>\n<meta property=\"og:description\" content=\"Petite piq\u00fbre de rappel pour tous ceux qui se trouvent entre ces deux releases, la valeur du param\u00e8tre default_password_lifetime est fix\u00e9e \u00e0 360 par d\u00e9faut, ce qui signifie que si vous n’avez pas pr\u00e9cis\u00e9 la clause PASSWORD EXPIRE NEVER dans… Continuer la lecture →\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/\" \/>\n<meta property=\"og:site_name\" content=\"Capdata TECH BLOG\" \/>\n<meta property=\"article:published_time\" content=\"2017-09-22T14:27:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-09-13T11:56:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2017\/09\/defltpasswdlifetime.png\" \/>\n\t<meta property=\"og:image:width\" content=\"670\" \/>\n\t<meta property=\"og:image:height\" content=\"284\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"David Baffaleuf\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Baffaleuf\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/\"},\"author\":{\"name\":\"David Baffaleuf\",\"@id\":\"https:\/\/blog.capdata.fr\/#\/schema\/person\/136297da9f61d6e4878abe0f48bc5fbf\"},\"headline\":\"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10\",\"datePublished\":\"2017-09-22T14:27:36+00:00\",\"dateModified\":\"2019-09-13T11:56:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/\"},\"wordCount\":306,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/blog.capdata.fr\/#organization\"},\"articleSection\":[\"MySQL\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/\",\"url\":\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/\",\"name\":\"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10 - Capdata TECH BLOG\",\"isPartOf\":{\"@id\":\"https:\/\/blog.capdata.fr\/#website\"},\"datePublished\":\"2017-09-22T14:27:36+00:00\",\"dateModified\":\"2019-09-13T11:56:47+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/blog.capdata.fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.capdata.fr\/#website\",\"url\":\"https:\/\/blog.capdata.fr\/\",\"name\":\"Capdata TECH BLOG\",\"description\":\"Le blog technique sur les bases de donn\u00e9es de CAP DATA Consulting\",\"publisher\":{\"@id\":\"https:\/\/blog.capdata.fr\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.capdata.fr\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blog.capdata.fr\/#organization\",\"name\":\"Capdata TECH BLOG\",\"url\":\"https:\/\/blog.capdata.fr\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/blog.capdata.fr\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2023\/01\/logo_capdata.webp\",\"contentUrl\":\"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2023\/01\/logo_capdata.webp\",\"width\":800,\"height\":254,\"caption\":\"Capdata TECH BLOG\"},\"image\":{\"@id\":\"https:\/\/blog.capdata.fr\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/cap-data-consulting\/mycompany\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.capdata.fr\/#\/schema\/person\/136297da9f61d6e4878abe0f48bc5fbf\",\"name\":\"David Baffaleuf\",\"sameAs\":[\"http:\/\/www.capdata.fr\"],\"url\":\"https:\/\/blog.capdata.fr\/index.php\/author\/dbaffaleuf\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10 - Capdata TECH BLOG","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/","og_locale":"fr_FR","og_type":"article","og_title":"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10 - Capdata TECH BLOG","og_description":"Petite piq\u00fbre de rappel pour tous ceux qui se trouvent entre ces deux releases, la valeur du param\u00e8tre default_password_lifetime est fix\u00e9e \u00e0 360 par d\u00e9faut, ce qui signifie que si vous n’avez pas pr\u00e9cis\u00e9 la clause PASSWORD EXPIRE NEVER dans… Continuer la lecture →","og_url":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/","og_site_name":"Capdata TECH BLOG","article_published_time":"2017-09-22T14:27:36+00:00","article_modified_time":"2019-09-13T11:56:47+00:00","og_image":[{"width":670,"height":284,"url":"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2017\/09\/defltpasswdlifetime.png","type":"image\/png"}],"author":"David Baffaleuf","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"David Baffaleuf","Dur\u00e9e de lecture estim\u00e9e":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/#article","isPartOf":{"@id":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/"},"author":{"name":"David Baffaleuf","@id":"https:\/\/blog.capdata.fr\/#\/schema\/person\/136297da9f61d6e4878abe0f48bc5fbf"},"headline":"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10","datePublished":"2017-09-22T14:27:36+00:00","dateModified":"2019-09-13T11:56:47+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/"},"wordCount":306,"commentCount":0,"publisher":{"@id":"https:\/\/blog.capdata.fr\/#organization"},"articleSection":["MySQL"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/","url":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/","name":"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10 - Capdata TECH BLOG","isPartOf":{"@id":"https:\/\/blog.capdata.fr\/#website"},"datePublished":"2017-09-22T14:27:36+00:00","dateModified":"2019-09-13T11:56:47+00:00","breadcrumb":{"@id":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.capdata.fr\/index.php\/default_password_lifetime-a-360-jours-entre-la-5-7-4-et-5-7-10\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/blog.capdata.fr\/"},{"@type":"ListItem","position":2,"name":"default_password_lifetime \u00e0 360 jours entre la 5.7.4 et 5.7.10"}]},{"@type":"WebSite","@id":"https:\/\/blog.capdata.fr\/#website","url":"https:\/\/blog.capdata.fr\/","name":"Capdata TECH BLOG","description":"Le blog technique sur les bases de donn\u00e9es de CAP DATA Consulting","publisher":{"@id":"https:\/\/blog.capdata.fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.capdata.fr\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/blog.capdata.fr\/#organization","name":"Capdata TECH BLOG","url":"https:\/\/blog.capdata.fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/blog.capdata.fr\/#\/schema\/logo\/image\/","url":"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2023\/01\/logo_capdata.webp","contentUrl":"https:\/\/blog.capdata.fr\/wp-content\/uploads\/2023\/01\/logo_capdata.webp","width":800,"height":254,"caption":"Capdata TECH BLOG"},"image":{"@id":"https:\/\/blog.capdata.fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/cap-data-consulting\/mycompany\/"]},{"@type":"Person","@id":"https:\/\/blog.capdata.fr\/#\/schema\/person\/136297da9f61d6e4878abe0f48bc5fbf","name":"David Baffaleuf","sameAs":["http:\/\/www.capdata.fr"],"url":"https:\/\/blog.capdata.fr\/index.php\/author\/dbaffaleuf\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/posts\/6354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/comments?post=6354"}],"version-history":[{"count":17,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/posts\/6354\/revisions"}],"predecessor-version":[{"id":7810,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/posts\/6354\/revisions\/7810"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/media\/7809"}],"wp:attachment":[{"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/media?parent=6354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/categories?post=6354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.capdata.fr\/index.php\/wp-json\/wp\/v2\/tags?post=6354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}