sysown / proxysql

High-performance MySQL proxy with a GPL license.
http://www.proxysql.com
GNU General Public License v3.0
6.05k stars 983 forks source link

Is there dual password support in ProxySQL to carry out safer password rotation of user #4700

Open ambatipavan28 opened 1 month ago

ambatipavan28 commented 1 month ago

Hello, We are trying to carry out password rotation for the users created in MariaDB databases. We are using ProxySQL in between the application and the MariaDB server. We found a way to have dual passwords for a user in MariaDB, but could not find a way to have 2 passwords for that particular user in ProxySQL. We tried to create a same user with different password, but could not do it because of unique constraints. Is there any other way where we can dual password for a user in ProxySQL?

Thanks in advance.

sebalaise commented 1 month ago

@renecannao, @rahim-kanji, FYI, MySQL supports dual passwords for a user as of 8.0.14 (and now also MariaDBs). Supporting this in ProxySQL as well would be helpful for exposing that feature end-to-end and facilitating the rotation of passwords in ProxySQL. https://dev.mysql.com/doc/mysql-security-excerpt/8.0/en/password-management.html#dual-passwords

ambatipavan28 commented 1 month ago

Hi @renecannao, any news about how we can manage password rotation for a user in ProxySQL with out any delay/outage?