Skip to content

Commit

Permalink
resolve conflicts
Browse files Browse the repository at this point in the history
  • Loading branch information
qiancai authored Oct 12, 2024
1 parent 226c230 commit 9d81611
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 17 deletions.
11 changes: 0 additions & 11 deletions TOC.md
Original file line number Diff line number Diff line change
Expand Up @@ -467,17 +467,6 @@
- [TiKV](/grafana-tikv-dashboard.md)
- [TiFlash](/tiflash/monitor-tiflash.md)
- [TiCDC](/ticdc/monitor-ticdc.md)
<<<<<<< HEAD
- Secure
- [Enable TLS Between TiDB Clients and Servers](/enable-tls-between-clients-and-servers.md)
- [Enable TLS Between TiDB Components](/enable-tls-between-components.md)
- [Generate Self-signed Certificates](/generate-self-signed-certificates.md)
- [Encryption at Rest](/encryption-at-rest.md)
- [Enable Encryption for Disk Spill](/enable-disk-spill-encrypt.md)
- [Log Redaction](/log-redaction.md)
=======
- [Resource Control](/grafana-resource-control-dashboard.md)
>>>>>>> fcaa5e3831 (Add security configuration documentation and migrate security docs di… (#18996))
- Privileges
- [Security Compatibility with MySQL](/security-compatibility-with-mysql.md)
- [Privilege Management](/privilege-management.md)
Expand Down
6 changes: 0 additions & 6 deletions best-practices-for-security-configuration.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,12 +20,6 @@ To avoid this risk, it is recommended to set a root password during deployment:
- For deployments using TiUP, refer to [Deploy TiDB Cluster Using TiUP](/production-deployment-using-tiup.md#step-7-start-a-tidb-cluster) to generate a random password for the root user.
- For deployments using TiDB Operator, refer to [Set initial account and password](https://docs.pingcap.com/tidb-in-kubernetes/stable/initialize-a-cluster#set-initial-account-and-password) to set the root password.

## Enable password complexity checks

By default, TiDB does not enforce password complexity policies, which might lead to the use of weak or empty passwords, increasing security risks.

To ensure that database users create strong passwords, it is recommended to configure a reasonable [password complexity policy](/password-management.md#password-complexity-policy). For example, configure a policy that requires passwords to include a combination of uppercase letters, lowercase letters, numbers, and special characters. By enforcing password complexity checks, you can improve database security, prevent brute force attacks, reduce internal threats, ensure compliance with regulations, and lower the risk of data breaches, thus enhancing overall security.

## Change the default Grafana password

TiDB installation includes the Grafana component by default, and the default username and password are typically `admin`/`admin`. If the password is not changed promptly, attackers could exploit this to gain control of the system.
Expand Down

0 comments on commit 9d81611

Please sign in to comment.