RE: Encrypting a password

From: Ron Rogers <RROGERS_at_galottery.org>
Date: Tue, 31 Jul 2001 11:27:10 -0700
Message-ID: <F001.0035AB8A.20010731113602@fatcity.com>

When you say" store the encripted password in a table.." which table were you refering to? dba_users? I don't think that the encripted password such as 'EccNRiptIONB' for the password "quessit1" will encript to the same string in Oracle. You could update the dba_users table set the password to values "EccNRiptIONB" and attempt to log in. If you take the encripted Oracle password (16 characters) and place it in the /etc/shadow file it will not work. Unless things have changed the UNIX password encripted is longer that 16 characters. ROR mª¿ªm

>>> Jacques.Kilchoer_at_quest.com 07/31/01 02:53PM >>>

> -----Original Message-----
> From: Rick_Stephenson_at_ovid.com [mailto:Rick_Stephenson_at_ovid.com]
>
> The problem is that I need one to encrypt a password in the
> same manner as
> the Sun OS. This is because we use the database to populate
> /etc/passwd.
> So if the OS can't compare passwords with what is stored in
> the database,
> then nobody will be able to log into the Unix box.

Could you write an external procedure on the Sun box that

a) changes the password for the user with the passwd command;
b) retrieves the new password from the /etc/shadow file;
c) returns the encrypted password to the database for storing in an Oracle

table?

Jacques R. Kilchoer
(949) 754-8816
Quest Software, Inc.
8001 Irvine Center Drive
Irvine, California 92618
U.S.A.
http://www.quest.com

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Ron Rogers
  INET: RROGERS_at_galottery.org

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Tue Jul 31 2001 - 13:27:10 CDT