Defining MySQL User IDs

The following properties are applicable to a MySQL User ID object.

Tab

Property

Description

Additional Information

General Auth String Specifies the string in the format (unencrypted or hashed) expected by the authentication plugin associated with the account  
Random Password Specifies whether MySQL should generate a random password in the format (unencrypted or hashed) expected by the authentication plugin associated with the account  
Authentication_Plugin Specifies the name of an authentication plugin  
Require Option Specifies the SSL/TLS -related options for the MySQL account

None: Indicates that the account has no SSL or X.509 requirements

SSL: Indicates that the server permits only encrypted connection for the account

X509: Indicates that the clients present a valid certificate and it is possible to verify its signature with one of the (Certificate Authority) CA certificates for the account

Cipher Specifies the cipher method for encrypting connections  
Issuer Specifies the certificate authority that issues the X.509 certificate  
Subject Specifies the subject of the X.509 certificate that a client is required to present  
Max Queries/Hour Specifies the maximum number of queries to the server, permitted to the account in a given one-hour period  
Max Updates/Hour Specifies the maximum number of updates to the server, permitted to the account in a given one-hour period  
Max Connections/Hour Specifies the maximum number of connections to the server, permitted to the account in a given one-hour period  
Max User Connections Specifies the maximum number of simultaneous connections permitted to the server by the account  
Password Expire Specifies the password expiration options

Expire: Indicates that the password expired for the account

Default: Indicates that the global expiration policy applies to the account

Never: Indicates that the password expiration is disabled and the password of the account never expires

Interval: Indicates that the password lifetime is set as specified by the Password Expire Interval

Password Expire Interval Specifies the number of days to set the password lifetime  
Password History Specifies the history-length of passwords to prohibit recently chosen passwords  
Password Reuse Interval Specifies the password reuse interval in days to prohibit reuse of passwords newer than that many days  
Password Require Specifies whether it is required to specify the current password for changing the account password

Current: Indicates that it is required to specify the current password for changing the password

Current_Default: Indicates that global policy applies for password verification

Current_Optional: Indicates that it is not required to specify the current password for changing the password

Failed Login Attempts Specifies the number of consecutive password failures that cause temporary account locking if Password Lock Time is nonzero Entering 0 disables failed-login tracking
Password Lock Time Unbounded Specifies whether the account locking duration is unbounded  
Password Lock Time Specifies the account locking duration in days Entering 0 disables temporary account locking
Lock Option Specifies the locking state for the account

Lock: Indicates that the account is locked

Unlock: Indicates that the account is unlocked

Attribute Specifies a JSON object containing one or more key-value pairs  

Roles

Name Specifies the role of the user  

Due to MYSQL database limitations, REDB does not retrieve comments for the User ID object.