Re: Oracle equivalent to unix 'su - username'... connecting as someone else

From: <landmass_at_iname.com>
Date: 1998/09/02
Message-ID: <6sjd88$alf$1_at_nnrp1.dejanews.com>#1/1


It is a feature used by import to recreate users when you do a full export - if you check the dump file, the users are recreated using the statement "create user xxxxxx identified by values 'yyyyyyyy';" where 'yyyyyyy' is the value that can be seen in the dba_users column password....

In article <6shgfj$oj_at_jupiter.planet.net>,   jared_at_pandora.planet.net (Jared Hecker) wrote:
> One would want to connect as a non-dba to do things like grant object
> privileges on objects the non-dba owns to others.
>
> landmass_at_iname.com wrote:
> : Easiest way, is to look at the dba_users table, which holds an encrypted
> : version of the password. If you do a "select username, password from
> : dba_users where user_name = '????';", and then save this to a file - DO NOT
> : DELETE IT. You can then use the 'alter user xxxx identified by yyyy;'
> : statement to change the users password to something that you know.... When
> : you have finished, you can change it back to its previous value: alter user
> : xxxxx identified by values '<paste password string from file here>';
>
> Really?? Must try this, I didn't know this was a consistent cypher.
> Rather defeats the purpose of encrypting the password, though.
>
> Regards,
> jh
> --
> Jared Hecker | HWA Inc. - Oracle architecture and Administration
> jared_at_hwai.com | ** serving NYC and New Jersey **
>

-----== Posted via Deja News, The Leader in Internet Discussion ==----- http://www.dejanews.com/rg_mkgrp.xp Create Your Own Free Member Forum Received on Wed Sep 02 1998 - 00:00:00 CEST

Original text of this message