Re: Passwords in DBA_USERS (Oracle 12c)

From: Ryan January <rjanuary_at_gmail.com>
Date: Wed, 6 Jul 2016 19:54:31 -0500
Message-Id: <35D0FDF1-E93C-42F8-98FA-299DC4F03FC4_at_gmail.com>


As far as I'm aware, it was done to support case sensitive passwords. If it wasn't officially documented by Oracle, it's been unofficially documented for years by the commit it at large.

> On Jul 6, 2016, at 7:41 PM, Mladen Gogala <gogala.mladen_at_gmail.com> wrote:
>

>> On 07/06/2016 07:50 PM, Ricardo Arnoud wrote:
>> Try the following for 12c:
>> 
>> select 'ALTER USER '||name||' identified by values '||CHR(39)||spare4||';'||password||CHR(39)||';'
>> from user$ where name in ('SCOTT');

>
> Hi Ricardo,
> I know that SPARE4 is SHA version of the password hash, but my point was more to clarify why was it done, and even more importantly, why wasn't such an important change documented? It is also possible to extract the hash using DBMS_METADATA.GET_DDL. I have solved my original problem, that's not the point.
>
> Regards
>
>
> --
> Mladen Gogala
> Oracle DBA
> Tel: (347) 321-1217
>
> --
> http://www.freelists.org/webpage/oracle-l
>
>
--
http://www.freelists.org/webpage/oracle-l
Received on Thu Jul 07 2016 - 02:54:31 CEST

Original text of this message