Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: How to trap password

Re: How to trap password

From: Daniel Morgan <dmorgan_at_exesolutions.com>
Date: Wed, 03 Jul 2002 15:34:44 GMT
Message-ID: <3D23196E.9CFABB2A@exesolutions.com>


Chris Forbis wrote:

> Niall,
>
> My end goal is to be able to have a function like this:
>
> IsUserValid(username, password)
>
> This needs to check the username and check the password against
> oracle. I could do a connect, but this take about 1.5-2.0 seconds on
> my system. I already have a pool of connecitons and because all I need
> to do is check a login, I really hate to connect for this.
>
> "Niall Litchfield" <n-litchfield_at_audit-commission.gov.uk> wrote in message news:<3d21b6d1$0$236$ed9e5944_at_reading.news.pipex.net>...
> > what is the problem you are trying to solve?
> >
> >
> > --
> > Niall Litchfield
> > Oracle DBA
> > Audit Commission UK
> > *****************************************
> > Please include version and platform
> > and SQL where applicable
> > It makes life easier and increases the
> > likelihood of a good answer
> >
> > ******************************************
> > "Chris Forbis" <chrisforbis_at_yahoo.com> wrote in message
> > news:f2dc430d.0207020518.32771f37_at_posting.google.com...
> > > I need to store a users password in a format that can be used by my
> > > application without login a user in (I have an user that will have
> > > access only to the PW table)
> > >
> > > I have a table like this
> > > USER_ID : OracleUserID
> > > PW_ENCODED : MD5 encoded password
> > >
> > > I would like this MD5 encoded password to always be valid for a user.
> > > I need to be able to update it when a user alters there password.
> > > Ideas?
> > >
> > > Is there a on alter password trigger?
> > >
> > > Or better yet how does Oracle valid a user against a password, that
> > > would be a better place to get my job done.
> > >
> > > Thanks!

I find this frightening. A gross security violation intended to save someone 1.5 seconds out of the workday. Do you time restroom breaks there?

Lets see if 1 employee waste 1.5 seconds each workday for one year it equals 6.5 minutes If it takes you three hours to write this thing (and it will likely be a lot more) it will equal 180 minutes So the breakeven is at 28 employees assuming they are all paid as much as you are

Surely there must be something more important going on like looking at wait events or large pool utilization.

Daniel Morgan Received on Wed Jul 03 2002 - 10:34:44 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US