Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Mailing Lists -> Oracle-L -> RE: Risk of knowing password hash value (Was: OEM permissions)
This is what I got, Oracle 8.1.7.4 on Sun Solaris (I dropped the user):
Connected to:
Oracle8i Enterprise Edition Release 8.1.7.4.0 - Production
With the Partitioning option
JServer Release 8.1.7.4.0 - Production
SQL> create user scott identified by tiger;
User created.
SQL> select password
2 from dba_users
3 where username = 'SCOTT';
PASSWORD
SQL>
Scott Canaan (srcdco_at_rit.edu)
(585) 475-7886
"Life is like a sewer, what you get out of it depends on what you put
into it." - Tom Lehrer.
-----Original Message-----
rahul sharma
Sent: Tuesday, December 23, 2003 1:14 AM
To: Multiple recipients of list ORACLE-L
8.1.7 on win2000
SQL> select password
2 from dba_users
3 where username = 'SCOTT';
PASSWORD
> Hi,
>
> Okay. I'm almost a believer of this as a problem. How
> about 9.2.0.4 on RH9.3.
>
> 1) What does anyone/everyone get for my this query (my
> results shown):
>
> connect system/blah_at_blah;
> alter user scott identified by tiger;
> --
> select password
> from dba_users
> where username = 'SCOTT';
>
> PASSWORD
> ----------------
> F894844C34402B67
>
> 2) If you all get the same, then I'm concerned.
>
> Regards,
>
> Mike Thomas
>
> --- Yong Huang <yong321_at_yahoo.com> wrote:
> > Jared,
> >
> > I see you log out and log back in as SYSTEM to DB2.
> > But how do you know the
> > password for SYSTEM to log back in with after you
> > change it?
> >
> > What if you don't log out? When I tried that (i.e.
> > not logging out), I got
> > ORA-1017.
> >
> > Yong Huang
> >
> > --- Jared Still <jkstill_at_cybcon.com> wrote:
> > > Environment:
> > >
> > > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > >
> > > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > >
> > > SYSTEM user on each database initially have
> > different passwords.
> > >
>
>
> __________________________________
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Michael Thomas
> INET: mhthomas_at_yahoo.com
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: rahul sharma INET: rahul_at_infotech.co.id Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Scott Canaan INET: srcdco_at_rit.edu Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Tue Dec 23 2003 - 07:34:33 CST