Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: Risk of knowing password hash value (Was: OEM permissions)

RE: Risk of knowing password hash value (Was: OEM permissions)

From: Scott Canaan <srcdco_at_rit.edu>
Date: Tue, 23 Dec 2003 05:34:33 -0800
Message-ID: <F001.005DAE6C.20031223053433@fatcity.com>


This is what I got, Oracle 8.1.7.4 on Sun Solaris (I dropped the user):

Connected to:
Oracle8i Enterprise Edition Release 8.1.7.4.0 - Production With the Partitioning option
JServer Release 8.1.7.4.0 - Production

SQL> create user scott identified by tiger;

User created.

SQL> select password
  2 from dba_users
  3 where username = 'SCOTT';

PASSWORD



F894844C34402B67

SQL> Scott Canaan (srcdco_at_rit.edu)
(585) 475-7886
"Life is like a sewer, what you get out of it depends on what you put into it." - Tom Lehrer.

-----Original Message-----
rahul sharma
Sent: Tuesday, December 23, 2003 1:14 AM To: Multiple recipients of list ORACLE-L

8.1.7 on win2000

SQL> select password
  2 from dba_users
  3 where username = 'SCOTT';

PASSWORD



F894844C34402B67

> Hi,
>
> Okay. I'm almost a believer of this as a problem. How
> about 9.2.0.4 on RH9.3.
>
> 1) What does anyone/everyone get for my this query (my
> results shown):
>
> connect system/blah_at_blah;
> alter user scott identified by tiger;
> --
> select password
> from dba_users
> where username = 'SCOTT';
>
> PASSWORD
> ----------------
> F894844C34402B67
>
> 2) If you all get the same, then I'm concerned.
>
> Regards,
>
> Mike Thomas
>
> --- Yong Huang <yong321_at_yahoo.com> wrote:
> > Jared,
> >
> > I see you log out and log back in as SYSTEM to DB2.
> > But how do you know the
> > password for SYSTEM to log back in with after you
> > change it?
> >
> > What if you don't log out? When I tried that (i.e.
> > not logging out), I got
> > ORA-1017.
> >
> > Yong Huang
> >
> > --- Jared Still <jkstill_at_cybcon.com> wrote:
> > > Environment:
> > >
> > > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > >
> > > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > >
> > > SYSTEM user on each database initially have
> > different passwords.
> > >
>
>
> __________________________________
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Michael Thomas
> INET: mhthomas_at_yahoo.com
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: rahul sharma
  INET: rahul_at_infotech.co.id

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Scott Canaan
  INET: srcdco_at_rit.edu

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Tue Dec 23 2003 - 07:34:33 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US