Re: password encryption

From: Andreas Moroder <Andreas.moroder_at_[nospam>
Date: Mon, 12 Jun 2006 12:41:12 +0200
Message-ID: <e6jjnj$kdt$1@news.dtag.de>

Mark D Powell schrieb:
> If you are referring to the interal database storage of passwords then
> the password is not encrypted; it is hashed. A paper has been
> published on how to break the Oracle hash, but I do not think the
> approximate 20 day average time to crack the hash will work for your
> purposes..

....

hello Mark,

no plans to crack it. Even the passwor in md5 are not encrypted but hashed with MD5. If even oracle uses md5 it should be possible to simply import the openldap passord into the oracle dba_users table and it should work.

Bye
Andreas Received on Mon Jun 12 2006 - 05:41:12 CDT