RE: password

why isn't there a program available that can reverse engineer the code used to encrypt passwords...

if username XYZ always has password (encrypted) CBA, you think that it would be easy to figure out the pattern... once you have the pattern it's easy to go back and forth with the password and the encrypted password.

-----Original Message-----
Sent: Friday, December 20, 2002 8:21 AM
To: Multiple recipients of list ORACLE-L

Yes, this is the intended behaviour (although I can't find where it actually documented). Passwords are stored using a one-way encryption and this encrypted form applies to all Oracle platforms. It is used, for example, during export/import of full dumps where the users are created on the new (import) database with the same password they had on the old (export) database simply by copying the encrypted form. This must be cross-platform/version, and exp/imp is cross-platform/version. You can do the same thing as exp/imp does by:

CREATE USER <user> IDENTIFIED BY VALUES <encrypted form> eg
CREATE USER TEST IDENTIFIED BY VALUES '7A0F2B316C212D67'; Note, though that the encrypted form of the password is dependent on the username for which it applies, so you cannot use this to set the same password for a differently named user.

• Bill.

At 06:14 20/12/2002 -0800, you wrote:
>Same on linux 7.2 Oracle 8.1.7 rel 3
>Ron
>
> >>> venu.andem_at_wipro.com 12/20/02 04:07AM >>>
>BOB, its the same on my machine... 8.1.6 on NT
>-Venu
>
> -----Original Message-----
> From: Bob Metelsky [mailto:bmetelsky_at_cps92.com]
> Sent: Wednesday, December 18, 2002 3:56 AM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: password
>
>
>
> created a user test identified by test on 2 separate systems
>in
>db's with different names
> The password value was the same
> Can someone verify if it is the same on their system
> Create user test identified by test;
> select password from dba_users where username = 'TEST';
> PASSWORD
> ------------------------------
> 7A0F2B316C212D67
>
> -----Original Message-----
>
>
>
>
> on my db
>
>
>
> LTRACK1 SQL> select password from dba_users where
>username = 'TEST';
>
> PASSWORD
> ------------------------------
> 7A0F2B316C212D67
>
>
>
> bob
>
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.net
>--
>Author: Ron Rogers
> INET: RROGERS_at_galottery.org
>
>Fat City Network Services -- 858-538-5051 http://www.fatcity.com
>San Diego, California -- Mailing list and web hosting services
>---------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).

-- 
Intasys Billing Technologies Ltd.               www.intasysbilling.com
74 Commercial Street, Commercial Quay, Leith, Edinburgh EH6 6LX
tel (0)131 625 8200 fax (0)131 625 8201 email wbuchan_at_uk.intasys.com

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Bill Buchan
  INET: wbuchan_at_uk.intasys.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Nick Wagner
  INET: Nick.Wagner_at_quest.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).