Message-ID: <F001.00529529.20030107151114@fatcity.com>
Date: Tue, 07 Jan 2003 15:11:14 -0800
To: Multiple recipients of list ORACLE-L <ORACLE-L@fatcity.com>
Sender: root@fatcity.com
Reply-To: ORACLE-L@fatcity.com
Errors-To: ML-ERRORS@fatcity.com
From: =?ISO-8859-1?Q?Mogens_N=F8rgaard?= <mln@miracleas.dk>
Subject: Re: encrypted user/passwd connection
Organization: Fat City Network Services, San Diego, California
Precedence: bulk
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

If the other end cannot encrypt passwords (I think that's before 7.1) 
then Oracle will try once encrypting, then try the second time 
un-encrypted. That's the way it was when I last checked. So it might 
still be possible to cheat it somehow with parameters, perhaps?

Mogens

Sony kristanto wrote:

>You're right Jared, all oracle password is encrypted. Btw Andrey if it is
>possible how to do it ?
>
>  
>
>>-----Original Message-----
>>From:	Jared Still [SMTP:jkstill@cybcon.com]
>>Sent:	Tuesday, January 07, 2003 11:04 AM
>>To:	Multiple recipients of list ORACLE-L
>>Subject:	Re: encrypted user/passwd connection
>>
>>
>>Andre,
>>
>>Oracle does not send passwords across the network
>>in clear text, they are encrypted by default.
>>
>>Jared
>>
>>On Monday 06 January 2003 05:43, Andrey Bronfin wrote:
>>    
>>
>>>Dear list !
>>>I have just been asked the following question:
>>>is it possible to make a connection from an Oracle client to an Oracle
>>>instance (both are 8.1.7) in an "encrypted" way.
>>>I.e. if someone is sitting with a sniffer between the server and the
>>>client, then i don't want him to be able to see the user/passwd i'm
>>>connecting with. Again , i am NOT asking how store the data in the DB in
>>>      
>>>
>>an
>>    
>>
>>>"encrypted" way, but how to connect to an instance without showing my
>>>passwd.
>>>Thanks a lot!
>>>Andrey.
>>>      
>>>
>>----------------------------------------
>>Content-Type: text/html; charset="iso-8859-1"; name="Attachment: 1"
>>Content-Transfer-Encoding: 7bit
>>Content-Description: 
>>----------------------------------------
>>-- 
>>Please see the official ORACLE-L FAQ: http://www.orafaq.net
>>-- 
>>Author: Jared Still
>>  INET: jkstill@cybcon.com
>>
>>Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
>>San Diego, California        -- Mailing list and web hosting services
>>---------------------------------------------------------------------
>>To REMOVE yourself from this mailing list, send an E-Mail message
>>to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in
>>the message BODY, include a line containing: UNSUB ORACLE-L
>>(or the name of mailing list you want to be removed from).  You may
>>also send the HELP command for other information (like subscribing).
>>
>>    
>>


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: =?ISO-8859-1?Q?Mogens_N=F8rgaard?=
  INET: mln@miracleas.dk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).