Failed-Login Tracking and Temporary Account Locking

[martinwalle]

SUMMARY

Implement the feature Failed-Login Tracking and Temporary Account Locking

ISSUE TYPE

• Feature Idea

COMPONENT NAME

mysql_user module

ADDITIONAL INFORMATION

It will improve the security and avoid some kind of attacks.

- name: Lock bob's account when 4 consecutive login attempt failed for unbounded time
  community.mysql.mysql_user:
    name: bob
    account_locking:
      FAILED_LOGIN_ATTEMPTS: 4
      PASSWORD_LOCK_TIME: UNBOUNDED

[Andersson007]

@martinwalle hi, thanks for the idea! I'm not an expert but sounds good to me.
@Jorge-Rodriguez what do you think? would you like to implement this?

[Jorge-Rodriguez]

@Andersson007 sure, I'll give this a go

[Andersson007]

@Jorge-Rodriguez and don't hesitate to put yourself in the authors lists of things you're improving;)

[Jorge-Rodriguez]

Note: this is supported only by MySQL >= 8.0.19
MariaDB does not support this feature.

MariaDB can offer similar functionality via the max_password_errors server variable. This collection's variables module should be used to this end.

[Andersson007]

we should add a check then. There is already a function for that in the module, as far as i remember. And we should add a note about that to the doc as well