oracle (v6, v7) password security (os/2 ,unix servers)

From: forrest d whitcher <fw_at_world.std.com>
Date: Mon, 5 Apr 1993 16:28:15 GMT
Message-ID: <C50r35.Bs3_at_world.std.com>


Hello, oracle users,

I am building an oracle v6 database to serve as a repository for information which is considered proprietary or confidential. As such I want to verify the security of oracle passwords and apply some of the same security checking techniques we use on our *nix systems. Specifically I would like to use Crack, or something like it to check the encrypted data for easily guessed passwords.

The use of 'Crack' would depend on oracle using the unix password encryption scheme, does anyone know if this is the case, or what method is used?

Any other methods for security checking / audit in the oracle environment would be much appreciated.

Please respond via email to: fw_at_world.std.com

Thanks in advance, I will summarize and post suggestions.

forrest whitcher fw_at_world.std.com Received on Mon Apr 05 1993 - 18:28:15 CEST

Original text of this message