RE: password

I thought (for a micro-second, and very smug I was too) that we'd be more-or-less safe from crack attempts as we're going to be using in 9iAS R2's Active Directory bit to authenticate from our AD servers.

But, thought I, the AD implementation on Oracle is a sub-set of master LDAP - they're not banging on the read AD tree, just a select set OF the tree. Which means .. someone using this crack tool on an Oracle server running the AD/LDAP authentication can crack the AD/LDAP tree?

Tell me if I'm right or not ... our AD admins aren't going to be happy.

~brian

-----Original Message-----

Sent: Tuesday, December 17, 2002 11:09 AM To: Multiple recipients of list ORACLE-L

Hmm...

Well maybe you *can* crack oracle passwords.

I've just ordered the full version of this product. ( $4, I don't think I need to bother the purchasing department ).

I'll let you know how it works.

Jared

"Mark Leith" <mark_at_cool-tools.co.uk>
Sent by: root_at_fatcity.com
 12/17/2002 06:23 AM
 Please respond to ORACLE-L  

        To:     Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
        cc: 
        Subject:        RE: password

Yes, you can do this, but it still doesn't tell you the users *current* password does it?  

Has anyone tried:  

http://home.earthlink.net/~adamshalon/oracle_password_cracker/  

?  

Mark
-----Original Message-----

Sent: 17 December 2002 13:59
To: Multiple recipients of list ORACLE-L

And you can use it to change it to your convenience and later get this encrypted password "IN" without the knowledge of the user..

Regards
Jai

Paulo Gomes <PGomes_at_Datinfor.pt>
Sent by: root_at_fatcity.com
12/17/02 06:08 PM
Please respond to ORACLE-L

        
        To:        Multiple recipients of list ORACLE-L 
<ORACLE-L_at_fatcity.com> 
        cc:         
        Subject:        RE: password

nope u can get the encripted password from the oracle dictionáry
-----Original Message-----

Sent: terça-feira, 17 de Dezembro de 2002 11:34 To: Multiple recipients of list ORACLE-L

Check the post-it note on their monitor?   

:)
-----Original Message-----

Sent: 17 December 2002 10:55
To: Multiple recipients of list ORACLE-L

he can't but he can change it to a new one and then put the old back on
-----Original Message-----

Sent: terça-feira, 17 de Dezembro de 2002 4:09 To: Multiple recipients of list ORACLE-L

how can a dba see the password of a user.

The new MSN 8: smart spam protection and 2 months FREE* -- Please see the official
ORACLE-L FAQ: http://www.orafaq.com -- Author: faisal ahmad INET: faisalahmad4u_at_hotmail.com Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services
--------------------------------------------------------------------- To
REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services


---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Brian Dunbar
  INET: Brian.Dunbar_at_Plexus.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services


---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).