RE: Encrypting a password

From: <Rick_Stephenson_at_ovid.com>
Date: Tue, 31 Jul 2001 08:24:29 -0700
Message-ID: <F001.0035A1E5.20010731072840@fatcity.com>

The problem is that I need one to encrypt a password in the same manner as the Sun OS. This is because we use the database to populate /etc/passwd. So if the OS can't compare passwords with what is stored in the database, then nobody will be able to log into the Unix box.

Thanks for you help,

Rick Stephenson

 Date: Mon, 30 Jul 2001 14:57:34 -0400
 Subject: RE: Encrypting a password

DBMS_OBFUSCATION package is exactly what you want.

I have build something like this with DBMS_OBFUSCATION although I did not compare against /etc/passwd.

I simply provided a "login" procedure, createKey, savePassword, retrievePassword.

I used a createKey function to create keys that were basically RAW(128) if I
remember correctly, then I had password stored encrypted in the database, then another table with a FK to the user table which stored the key in encrypted form.

You would need to join the key table with the encrypted password to decrypt or cross exam.

"Walking on water and developing software from a specification are easy if both are frozen."

Christopher R. Spence
Oracle DBA
Fuelspot

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
  INET: Rick_Stephenson_at_ovid.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Tue Jul 31 2001 - 10:24:29 CDT