RE: Encrypting a password

Try looking into "PAM" under Unix. That should help.

Also, contact Collective Technologies. They are a consulting firm I interviewed for, but I know they were able to do single login to Windows 2000, Oracle, and Unix. I am sure they will be able to help out in such a task.

There solution was using Kerbeos and Pam.

"Walking on water and developing software from a specification are easy if
both are frozen."

Christopher R. Spence
Oracle DBA
Fuelspot

-----Original Message-----
Sent: Tuesday, July 31, 2001 10:22 AM
To: ORACLE-L_at_fatcity.com
Cc: cspence_at_FuelSpot.com

The problem is that I need one to encrypt a password in the same manner as the Sun OS. This is because we use the database to populate /etc/passwd. So if the OS can't compare passwords with what is stored in the database, then nobody will be able to log into the Unix box.

Thanks for you help,

Rick Stephenson

 Date: Mon, 30 Jul 2001 14:57:34 -0400
 Subject: RE: Encrypting a password

DBMS_OBFUSCATION package is exactly what you want.

I have build something like this with DBMS_OBFUSCATION although I did not compare against /etc/passwd.

I simply provided a "login" procedure, createKey, savePassword, retrievePassword.

I used a createKey function to create keys that were basically RAW(128) if I remember correctly, then I had password stored encrypted in the database, then another table with a FK to the user table which stored the key in encrypted form.

You would need to join the key table with the encrypted password to decrypt or cross exam.

"Walking on water and developing software from a specification are easy if
both are frozen."

Christopher R. Spence
Oracle DBA
Fuelspot

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Christopher Spence
  INET: cspence_at_FuelSpot.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).