AOETEK's Lab

1.只備份一個資料庫可用下面指令：

mysqldump -u root -p --events --routines --triggers --default-character-set=utf8mb4 資料庫名稱 > backup.sql


2.備份全部資料庫：

mysql --default-character-set=utf8mb4 -u root -p rslhome < backup.sql

3.對於資料庫中的stored procedures, functions, triggers, events的備份，有一些額外的選項：
--events：匯出events
--routines：匯出stored procedures, functions
--triggers：導入triggers（默認）

4.備份view

I need to change a password of a postfix user account mailbox directly in a MySQL database; however I have no idea of the format used.

Here is the table:

SELECT username,password FROM mailbox LIMIT 1;
+------------------+------------------------------------+
| username         | password                           |
+------------------+------------------------------------+
| user@example.com | $1$60Dgu9vc$T7vaQfTKgxUpci0TTnsyO0 |
+------------------+------------------------------------+

解決方式：

The $1$ at the beginning of the password field hints it is a MD5 hash.

To encrypt a password in a MD5 hash, you can use the openssl passwd command.

From man openssl:

passwd Generation of hashed passwords.

and from openssl passwd --help:

-1 MD5-based password algorithm
-stdin read passwords from stdin

So to generate the MD5 hash, a short bash example:

#/bin/bash
PASSWORD="test123"
MD5=`echo $PASSWORD | openssl passwd -1 -stdin`

Running it, you got as output the intended encrypted password:

$1$EaYOC8n4$04LSDBtt4A8GPVRUkzBXG/

So to change the password in the MySQL DB to ‘test123’, you do in the MySQL prompt:

USE postfix
UPDATE mailbox SET password="$1$EaYOC8n4$04LSDBtt4A8GPVRUkzBXG/" WHERE username="user@example.com";

The change takes effect immediately, and the user will notice the change in the next mailbox access.

OS: Ubuntu 14.04 LTS, Apache 2.4.7, OpenSSL 1.0.1f
SSL Labs: A+ (RSA2048, SHA256 certificate)
Certificate: 100%
Protocol Support: 95%
Key Exchange: 90%
Cipher Strength: 90%

#### In the SSL.CONF file
SSLCipherSuite AES256+EECDH:AES256+EDH:AES128+EECDH:AES128+EDH

SSLProtocol -ALL -SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2

SSLHonorCipherOrder on
SSLStrictSNIVHostCheck Off
SSLCompression off

SSLStaplingCache shmcb:/tmp/stapling_cache(128000)

SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire

### In the section of file default-ssl.conf
SSLUseStapling on
SSLStaplingResponderTimeout 5
SSLStaplingReturnResponderErrors off

### headers_module must be enabled for these extra security settings
Header always set Strict-Transport-Security “max-age=63072000; includeSubDomains”
Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
Header set Public-Key-Pins “pin-sha256=\”\”; max-age=2592000; includeSubDomains”
Header always set X-Frame-Options SAMEORIGIN