Re: capture oracle pwd change in 3rd party application. help needed

From: Michael Gast <mig-sm_at_web.de>
Date: Tue, 11 Nov 2003 10:15:22 +0100
Message-ID: <3FB0A8AA.4050100@web.de>

Hi Daniel,

Daniel Morgan schrieb:

> Lasher wrote:
> 

>>Hi,
>>
>>I have clients using an application that allows users to change their
>>passwords. The application uses the 'ALTER USER xxx IDENTIFIED
>>BY.....' command. What I need to do is use Oracle to capture the
>>username and password and send the info to another Oracle instance on
>>a different server and update that users password.
>>
>>Basically I need to keep the user's password in sync between two
>>different databases.
>>
>>I also cannot change the application in anyway and therefore need to
>>do this from the Oracle side.
>>
>>Any ideas would be great.........
>>
>>

> Go to $ORACLE_HOME/rdmbs/admin
> Look at the file utlpwdmg.sql
> 
> If you have any business doing this you will be able to fill in the rest 
> of the picture.
> 
> Personally I agree with Pete. This is nonsense and worse than nonsense a 
> huge violation
> of any reasonable definition of system security. The OEM should fix the 
> problem. And
> my advise to you would be not to do this. That it can be done doesn't 
> mean that it should
> be done. The entire idea stinks.

I agree with you. The idea stinks. I addition, i'm not covinced that "Lasher" is "Mr. Lasher's" true name.

But let us assume "Mr. Lasher" has a valid problem and does not want to crack the DB. Could a possible solution be to realize a server sided single sign on to multiple databases? I'm not a specialist for Oracle security, but i've read in the "Security Overview" and the "Advanced Security Administrators Guide" manuals from Oracle that this could be done.I assume, this is not a crack and could be a usable solution for "Mr. Lasher's" problem if he does not want to crack the DB.

-- 
Mit freundlichen Grüßen / Best regards
Michael Gast
SEPP MED GmbH

All emails sent to this address are never read and never will be
answered. Sorry, but until someone cleans up the spam mess, that's the
way it has to be.

E-Mails, die direkt an diese Adresse geschickt werden, lese und
beantworte ich nicht. Ich bedauere diesen Umstand sehr, kenne derzeit
aber keine bessere Möglichkeit, um die Spam-Flut abzustellen.

Received on Tue Nov 11 2003 - 03:15:22 CST