Force a user to change the MySQL Password when changing the account password
As a Server Administrator, I want to force a user to change the MySQL Password when changing the account password, so that cPanel does not lose access
Issue #1 - User can use his primary MySQL login to access all of his databases. If he does and selects this he is broke but it will force him to use database users for his scripts resulting in tighter security on their account if their site gets hacked.
Issue #2 - If a user does not select this then cPanel cannot read their MySQL account information has to provide a password to access his phpmyadmin and cannot access any of the cPanel interfaces to the databases.
This is a feature that has been migrated over from the cPanel Forums. All previous comments and discussions concerning this feature can be located at:
http://forums.cpanel.net/f145/force-allow-mysql-password-change-200991.html
I find this functionality very interesting, especially if the password change occurs after a hack or after a change of webmaster. But there are many cases that it is not necessary to force a password change in MySQL, so I see more interesting an additional option in WHM that allows to select:
- Change only the password of cPanel
- Change password for cPanel + MySQL users
I find this functionality very interesting, especially if the password change occurs after a hack or after a change of webmaster. But there are many cases that it is not necessary to force a password change in MySQL, so I see more interesting an additional option in WHM that allows to select:
- Change only the password of cPanel
- Change password for cPanel + MySQL users
Replies have been locked on this page!