Return-Path: Delivered-To: 2-oracle-l@orafaq.com Received: (qmail 7527 invoked from network); 16 Oct 2007 14:15:49 -0500 Received: from freelists-180.iquest.net (HELO turing.freelists.org) (206.53.239.180) by 69.64.49.119 with SMTP; 16 Oct 2007 14:15:34 -0500 Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id E99E579DA0A; Tue, 16 Oct 2007 15:13:27 -0400 (EDT) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19724-02; Tue, 16 Oct 2007 15:13:27 -0400 (EDT) Received: from turing (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 6034679DA23; Tue, 16 Oct 2007 15:13:27 -0400 (EDT) Received: with ECARTIS (v1.0.0; list oracle-l); Tue, 16 Oct 2007 14:27:29 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 7EAF379E5E9 for ; Tue, 16 Oct 2007 14:27:29 -0400 (EDT) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13774-03 for ; Tue, 16 Oct 2007 14:27:29 -0400 (EDT) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.189]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 84B0179E5E7 for ; Tue, 16 Oct 2007 14:26:58 -0400 (EDT) Received: by nf-out-0910.google.com with SMTP id 4so1444527nfv for ; Tue, 16 Oct 2007 11:26:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; bh=VLBHznIqDfHDvf3d+fixD+2yk1cscyo/7WW4gfwjTUk=; b=Rd2KYppKyJkFe8JyIiYCXfxDc6BtDE/q//5U+2ELasan7dBG+igv3AflQ0AcmVAOj6zmQu/6yfOnfZtMQ0QN+yqBP7wgM42zwf2JQnnebPEk+iQYmxBJaInlVorOE7xzg9mIDPIspZ5zihTHjokniW6tZYHxTqMIPO8Dq7nm9Sk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=iPbiq5HEQ5tFuOaVrQeRIhvlWcmjB9EBzSdXG0D+uCFk1xX53eYl2KTvbXwCxuPUU8GujaKIUkAxCAmdyZ6EaASo9jKLexKkFsdU/l7yB9VCGMXkgFOFVRkqecURZDEb6UW2brPwZwclqHUkftSaHnDvEykonvk3NJ6szeZ6glY= Received: by 10.78.83.15 with SMTP id g15mr5253251hub.1192559212891; Tue, 16 Oct 2007 11:26:52 -0700 (PDT) Received: by 10.78.31.1 with HTTP; Tue, 16 Oct 2007 11:26:52 -0700 (PDT) Message-ID: <9b68098b0710161126y5712a6ddv278f27d9d3703e1e@mail.gmail.com> Date: Tue, 16 Oct 2007 20:26:52 +0200 From: "Vincent verpoort" To: "Sweetser, Joe" , "Oracle-L Freelists" Subject: Re: getting users passwords in plain text In-Reply-To: <9b68098b0710160808v7dbe781fk34660599d5ea402d@mail.gmail.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_42671_21134492.1192559212887" References: <9b68098b0710160614s5d8d8981s203710fe46f37ebb@mail.gmail.com> <9b68098b0710160808v7dbe781fk34660599d5ea402d@mail.gmail.com> X-archive-position: 2406 X-ecartis-version: Ecartis v1.0.0 Sender: oracle-l-bounce@freelists.org Errors-to: oracle-l-bounce@freelists.org X-original-sender: vincent.verpoort@gmail.com Precedence: normal Reply-to: vincent.verpoort@gmail.com List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: oracle-l X-List-ID: oracle-l List-subscribe: List-owner: List-post: List-archive: X-list: oracle-l X-Virus-Scanned: Debian amavisd-new at localhost.localdomain ------=_Part_42671_21134492.1192559212887 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline I think i was not very clear in my email What i want is to convert the original hashed password to plain text. I need to know that passwords because if i change them now, the weblogic guys need a weekend to rest them all. And as we don't have the time because where doing a release on production systems, this weekend i need the passwords of the users. changing them means that during the installion of new attributes we can't keep the pools open. editing the install to run it from the system user means we have to go back to the testing servers first and redo all testing. About the "I have a question that's a bit unethical. " The user's are appliction weblogic connection pool users. thats why its a bit unethical and not allot or illegal Also because these are appliction connection users i can't brute force them as it would not be in time unlesse i got about 7.8 year per user and the big question I just got here and the dba before me, well lets put it this way: knew the stuff but didn't put it down anywhere. And doesn't really wanne help anymore. why? don't ask me. tomorrow ill be at work again and ill give http://www.petefinnigan.com/weblog/archives/archive-102007.html ( see october 9th : thanks Paul Drake ) a try, ill update this mail chain with my findings. and thank you for all the info it really helped if anyone has anymore info or a quick fix please email On 10/16/07, Vincent verpoort wrote: > > i thought of doing a insert into mytable values (username,password); in the > $ORACLE_HOME/rdbms/admin/utlpwdmg.sql but i don't wanne edit or write anything more looking for a scritp that converts the hase to plain text > > > > On 10/16/07, Sweetser, Joe wrote: > > > > Not exactly sure what you want to do, but you might google for the > > undocumented "alter user XXX identified by values..." command. It will let > > you set the passwords back to what they were without knowing them. > > > > hth, > > -joe > > > > ------------------------------ > > *From:* oracle-l-bounce@freelists.org [mailto: > > oracle-l-bounce@freelists.org] *On Behalf Of *Vincent verpoort > > *Sent:* Tuesday, October 16, 2007 7:14 AM > > *To:* Oracle-L Freelists > > *Subject:* getting users passwords in plain text > > > > > > Hi Experts, > > > > I have a question that's a bit unethical. > > > > For a company i'm working for i need to find out what the passwords are > > of oracle users. As changing them means a lot of work for allot of poeple. > > > > Is there anyway i can clear text the password from dba database, i have > > sysdba and all privs. > > > > any points would be nice also i want to put this into script so if > > anyone has something ? > > > > -- > > Vincent Verpoort > > > > ,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_ > > Communiceren is begrepen worden > > ^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-. > > > > > > > -- > Vincent Verpoort > > ,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_ > Communiceren is begrepen worden > ^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-. > > -- Vincent Verpoort ,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_ Communiceren is begrepen worden ^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-. ------=_Part_42671_21134492.1192559212887 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline
I think i was not very clear in my email

What i want is to convert the original hashed password to plain text. I need to know that passwords because if i change them 
now, the weblogic guys need a weekend to rest them all. And as we don't have the time because where doing a release on production systems,
this weekend i need the passwords of the users.
 
changing them means that during the installion of new attributes we can't keep the pools open. editing the install to run it from the system user means we have to
go back to the testing servers first and redo all testing.
 
About the "I have a question that's a bit unethical. "
 
The user's are appliction weblogic connection pool users. thats why its a bit unethical and not allot or illegal
 
Also because these are appliction connection users i can't brute force them as it would not be in time unlesse i got about 7.8 year per user
 
and the big question
 
I just got here and the dba before me, well lets put it this way: knew the stuff but didn't put it down anywhere. And doesn't really wanne help anymore. why? don't ask me.
 
 
tomorrow ill be at work again and ill give http://www.petefinnigan.com/weblog/archives/archive-102007.html   ( see october 9th : thanks Paul Drake ) a try, ill update this mail chain with my findings.
 
and thank you for all the info it really helped
 
if anyone has anymore info or a quick fix please email
 
 
On 10/16/07, Vincent verpoort <vincent.verpoort@gmail.com > wrote: 
i thought of doing a insert into mytable values (username,password); in the  

$ORACLE_HOME/rdbms/admin/utlpwdmg.sql  but i don't wanne edit or write anything more looking for a scritp that converts the hase to plain text


On 10/16/07, Sweetser, Joe <JSweetser@icat.com > wrote:
Not exactly sure what you want to do, but you might google for the undocumented "alter user XXX identified by values..." command.  It will let you set the passwords back to what they were without knowing them.
 
hth,
-joe

From: oracle-l-bounce@freelists.org [mailto: oracle-l-bounce@freelists.org] On Behalf Of Vincent verpoort
Sent: Tuesday, October 16, 2007 7:14 AM
To: Oracle-L Freelists
Subject: getting users passwords in plain text
 
Hi Experts,

I have a question that's a bit unethical.

For a company i'm working for i need to find out what the passwords are of oracle users. As changing them means a lot of work for allot of poeple.

Is there anyway i can clear text the password from dba database, i have sysdba and all privs.

any points would be nice also i want to put this into script so if anyone has something ?

--
                           Vincent Verpoort

  ,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_
              Communiceren is begrepen worden
^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-.




--
                           Vincent Verpoort

  ,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_
              Communiceren is begrepen worden
^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-.




--
                           Vincent Verpoort

  ,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_,.-~`"'~-.,_
              Communiceren is begrepen worden
^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-._,.->*^*<-.

------=_Part_42671_21134492.1192559212887-- -- http://www.freelists.org/webpage/oracle-l