OraFAQ Forum: Security » Very Urgent!...

Home » RDBMS Server » Security » Very Urgent!...

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Very Urgent!... [message #118661]

Fri, 06 May 2005 14:29

David Shenoda
Messages: 4
Registered: July 2004

Junior Member

Hello:
I have a web application that requires user's login UID/PWD. The table DBA_USERS has the login info UID/PWD that we need, but the PWD is in Hex or Encrypted. How can I compare the user's PWD entered through the web app with the Encrypted PWD at the DBA_USERS table?

Can anyone help me please

Thanks;

Report message to a moderator

Re: Very Urgent!... [message #118679 is a reply to message #118661]

Fri, 06 May 2005 16:40

kapil2005
Messages: 44
Registered: March 2005

Member

I guess you cannot use that table to validate uid/pswd you would have to use your own table and use your own encryption key and use triggers and stored procedures (packages) to validate. do research in asktom.oracle.com

[Updated on: Fri, 06 May 2005 16:42]

Report message to a moderator

Re: Very Urgent!... [message #118714 is a reply to message #118679]

Sat, 07 May 2005 04:06

tycoonajayverma
Messages: 17
Registered: May 2005
Location: b'lore

Junior Member

Hi
with ur application u can compair the only username not the password, if u want to compair it then u have to use the same algo on the password which is used by oracle. or u use ur own table which has the username and the password and those users are created from application end only not from the database end otherwise no use......

In oracle the username is unique u can use it.
any futher detail u can reply it...

Thanks

[Updated on: Sat, 07 May 2005 04:07]

Report message to a moderator

Re: Very Urgent!... [message #118745 is a reply to message #118714]

Sat, 07 May 2005 14:54

girish.rohini
Messages: 744
Registered: April 2005
Location: Delhi (India)

Senior Member

Re: urgent help!!! Sat, 07 May 2005 00:56
David Shenoda
Hello:
I have a web application that requires user's login UID/PWD. The table DBA_USERS has the login info UID/PWD that we need, but the PWD is in Hex or Encrypted. How can I compare the user's PWD entered through the web app with the Encrypted PWD at the DBA_USERS table?

Can anyone help me please

Thanks;

[Updated on: Sat, 07 May 2005 00:57]

DBA_USERS shows you all Oracle users. These may/may not be your application users.

Also when u connect to Oracle using any of these Oracle users (as displayed by DBA_USERS), from your web application, the connection will fail if the uid/pwd is incorrect. U will get error in connection itself.

If the application users are not oracle users and u want authentication to happen via Oracle only, in that case one way is to store the uid/pwd in one separate table and use this table for authentication purpose.

Report message to a moderator

Previous Topic:	distructive user on my database....what should i do?
Next Topic:	Password Exipies soon..

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Wed Jan 08 20:07:56 CST 2025