Re: ORA-28002 When Using Hash

From: Michel Cadot <micadot{at}altern{dot}org>
Date: Mon, 13 Dec 2004 08:28:36 +0100
Message-ID: <41bd439b$0$12260$626a14ce@news.free.fr>

"Mark D Powell" <Mark.Powell_at_eds.com> a écrit dans le message de news:1102888481.359209.158580_at_c13g2000cwb.googlegroups.com...
> Michel, to the best of my knowledge Oracle does not store the original
> password in unhashed form. Why would you think it does?
> HTH -- Mark D Powell --
>

I think it does because when you activate the password verification function and change the password of a user, Oracle gives you the _old_ and new passwords in clear form.
If it can do that then, i think, it stores the old password somewhere in an unhashed form.

Regards
Michel Cadot Received on Mon Dec 13 2004 - 01:28:36 CST