Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: SQL script

Re: SQL script

From: Richard Kuhler <noone_at_nowhere.com>
Date: Thu, 18 Nov 2004 07:16:47 GMT
Message-ID: <z%Xmd.52825$jo2.14137@twister.socal.rr.com>


danthefirst2000_at_yahoo.com wrote:
> I need some help. I need to write a sql script to generate passwords.
> I will pass in a list of unique user names and the script should
> generate the passwords for each user. Any ideas how to go about it?

Will a human being need to remember and enter these passwords?

I ask because a password that can't be remembered is almost always written down, which greatly reduces it's effectiveness. If no one ever has to remember the password then something as simple as DBMS_CRYPTO.RANDOMINTEGER would probably be sufficient (available in 10g, you'll have to tell us if you're using something else). You might want to reject short results there. Otherwise, there are open source programs out there that will generate pronounceable strings of letters that are not simple words. You could also use a combination of two words with a single digit between them. If you have a sufficiently large set of words and a reasonably effective random number generator then the permutations can be quite large while keeping the passwords relatively memorable.

I assume you need this script to save these generated passwords somewhere with their associated user names, right? Obviously, how and where that is going to happen has to be secure as well.

--
Richard Kuhler
Received on Thu Nov 18 2004 - 01:16:47 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US