Re: copying users from one Instance to another

From: Thomas Kyte <tkyte_at_us.oracle.com>
Date: 1998/06/25
Message-ID: <359452f0.3510317_at_192.86.155.100>#1/1


A copy of this was sent to TyBri_at_my-dejanews.com (if that email address didn't require changing) On Thu, 25 Jun 1998 12:05:24 GMT, you wrote:

>When Oracle encrypts the password it uses the SID of the database as part of
>the encryption process. Hope this helps.

no it doesn't (i can change my sid if i want to and my passwords don't break).

I bet the DIGESTED password (its a one way digest, not encrypted. Encrypted data can be un-encrypted. digests cannot be) for scott/tiger on your system is F894844C34402B67. Scotts password "tiger" will always be that. When TKYTE uses tiger as a password however, it will be: 12C4C901E3E097E8. The same password is digested to a different value (based on username -- same username, same digest. different username, different digest)

You can use this in a create/alter user statement as such:

alter user scott identified by values 'F894844C34402B67';

to set the password to tiger in another database....

>
>In article <01bd9ec5$b6a00c10$f15c5b8f_at_b11a22>,
> "Kevin Brand" <kevinx_at_sequel.com> wrote:
>>
>> Is it possible to copy passwords from one engine to another?
>>
>> I've attempted to adjust the passwords in a throw-away instance by
>> manipulating the PASSWORD column in USER$, but this didn't work. I'm sure
>> there's a trick out there somewhere!
>>
>> Any suggestions?
>>
>> Thanks
>>
>> -Kevin
>>
>> I've cross-posted here because sometimes my posts don't show up on
>> ..oracle.server!
>> --
>>
>> remove the x for an email reply
>>
>
>
>-----== Posted via Deja News, The Leader in Internet Discussion ==-----
>http://www.dejanews.com/ Now offering spam-free web-based newsreading
 

Thomas Kyte
tkyte_at_us.oracle.com
Oracle Government
Herndon VA  

http://govt.us.oracle.com/ -- downloadable utilities  



Opinions are mine and do not necessarily reflect those of Oracle Corporation  

Anti-Anti Spam Msg: if you want an answer emailed to you, you have to make it easy to get email to you. Any bounced email will be treated the same way i treat SPAM-- I delete it. Received on Thu Jun 25 1998 - 00:00:00 CEST

Original text of this message