RE: encrypted user/passwd connection

Hi,

I think these 2 parameters are necessary ONLY for sql*net V2 compatibility.
If you are all Net8 (client and server), the password is always encrypted whatever the number of failed attempts.

To test it, active the trace in your client sqlnet.ora file (level 8 or 16) and examine the trace file.

By the way, ORA_ENCRYPT_LOGIN must be set in the environment (or registry) and DBLINK_ENCRYPT_LOGIN in the init.ora parameter file.

Hope this helps

At 07:03 07/01/2003 -0800, you wrote:
>
>"All oracle passwords are encrypted" is not a true statement. Failed login
>attempts, are retried by sending the password in an unencrypted format.
>Atleast, until 8.1.7. To avoid which, ORA_ENCRYPT_LOGIN variable and
>DBLINK_ENCRYPT_LOGIN parameter (for retried attempts across database link)
>should be set to TRUE.
>
>I could stand corrected though.
>
>Raj
>
>
>
>
>

                                           


>                    Sony kristanto

                                           


>                    <Sony_at_polyfinca        To:     Multiple recipients of

list ORACLE-L <ORACLE-L_at_fatcity.com>        


>                    nggih.com>             cc:

                                           


>                    Sent by:               Subject:     RE: encrypted

user/passwd connection                          


>                    root_at_fatcity.co

                                           


>                    m

                                           


>

                                           


>

                                           


>                    January 07,

                                           


>                    2003 01:53 AM

                                           


>                    Please respond

                                           


>                    to ORACLE-L

                                           


>

                                           


>

                                           

>
>
>
>
>You're right Jared, all oracle password is encrypted. Btw Andrey if it is
>possible how to do it ?
>
>> -----Original Message-----
>> From: Jared Still [SMTP:jkstill_at_cybcon.com]
>> Sent: Tuesday, January 07, 2003 11:04 AM
>> To: Multiple recipients of list ORACLE-L
>> Subject: Re: encrypted user/passwd connection
>>
>>
>> Andre,
>>
>> Oracle does not send passwords across the network
>> in clear text, they are encrypted by default.
>>
>> Jared
>>
>> On Monday 06 January 2003 05:43, Andrey Bronfin wrote:
>> > Dear list !
>> > I have just been asked the following question:
>> > is it possible to make a connection from an Oracle client to an Oracle
>> > instance (both are 8.1.7) in an "encrypted" way.
>> > I.e. if someone is sitting with a sniffer between the server and the
>> > client, then i don't want him to be able to see the user/passwd i'm
>> > connecting with. Again , i am NOT asking how store the data in the DB
>in
>> an
>> > "encrypted" way, but how to connect to an instance without showing my
>> > passwd.
>> > Thanks a lot!
>> > Andrey.
>
>
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.net
>--
>Author:
> INET: Rajesh.Rao_at_jpmchase.com
>
>Fat City Network Services -- 858-538-5051 http://www.fatcity.com
>San Diego, California -- Mailing list and web hosting services
>---------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).
>
>
>

Gilles Parc

carpe diem !!

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Gilles PARC
  INET: gparc_at_online.fr

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).