Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: encrypted user/passwd connection

Re: encrypted user/passwd connection

From: Mogens Nørgaard <mln_at_miracleas.dk>
Date: Tue, 07 Jan 2003 15:11:14 -0800
Message-ID: <F001.00529529.20030107151114@fatcity.com>


If the other end cannot encrypt passwords (I think that's before 7.1) then Oracle will try once encrypting, then try the second time un-encrypted. That's the way it was when I last checked. So it might still be possible to cheat it somehow with parameters, perhaps?

Mogens

Sony kristanto wrote:

>You're right Jared, all oracle password is encrypted. Btw Andrey if it is
>possible how to do it ?
>
>
>
>>-----Original Message-----
>>From: Jared Still [SMTP:jkstill_at_cybcon.com]
>>Sent: Tuesday, January 07, 2003 11:04 AM
>>To: Multiple recipients of list ORACLE-L
>>Subject: Re: encrypted user/passwd connection
>>
>>
>>Andre,
>>
>>Oracle does not send passwords across the network
>>in clear text, they are encrypted by default.
>>
>>Jared
>>
>>On Monday 06 January 2003 05:43, Andrey Bronfin wrote:
>>
>>
>>>Dear list !
>>>I have just been asked the following question:
>>>is it possible to make a connection from an Oracle client to an Oracle
>>>instance (both are 8.1.7) in an "encrypted" way.
>>>I.e. if someone is sitting with a sniffer between the server and the
>>>client, then i don't want him to be able to see the user/passwd i'm
>>>connecting with. Again , i am NOT asking how store the data in the DB in
>>>
>>>
>>an
>>
>>
>>>"encrypted" way, but how to connect to an instance without showing my
>>>passwd.
>>>Thanks a lot!
>>>Andrey.
>>>
>>>
>>----------------------------------------
>>Content-Type: text/html; charset="iso-8859-1"; name="Attachment: 1"
>>Content-Transfer-Encoding: 7bit
>>Content-Description:
>>----------------------------------------
>>--
>>Please see the official ORACLE-L FAQ: http://www.orafaq.net
>>--
>>Author: Jared Still
>> INET: jkstill_at_cybcon.com
>>
>>Fat City Network Services -- 858-538-5051 http://www.fatcity.com
>>San Diego, California -- Mailing list and web hosting services
>>---------------------------------------------------------------------
>>To REMOVE yourself from this mailing list, send an E-Mail message
>>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>>the message BODY, include a line containing: UNSUB ORACLE-L
>>(or the name of mailing list you want to be removed from). You may
>>also send the HELP command for other information (like subscribing).
>>
>>
>>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: =?ISO-8859-1?Q?Mogens_N=F8rgaard?=
  INET: mln_at_miracleas.dk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Tue Jan 07 2003 - 17:11:14 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US