Solved

Need to view the username and password a program is using to access a sql database

Posted on 2007-12-02
9
160 Views
Last Modified: 2010-04-21
Hey there, I had one of my team members compile a custome installer for a reporting program that accesses a SQL database.  My team member is gone now and we had an issue with the sql server needing to be reloaded.

We have access to the DB through the manager and know the SA password.

We know the SQL user account being used to query the database (is shows up in the event viewer log as logon filed for user 'username') when the application is run and trying to connect to the database.

How can we find out the PW the compiled program is trying to use so we can change the sql password for the user?

Is there anyway to sniff or is there an app withing the sql2005 tools to monitor usernames and passwords being used by incoming connections?

0
Comment
Question by:bcameron70
  • 6
  • 3
9 Comments
 
LVL 25

Expert Comment

by:imitchie
ID: 20392933
For security purposes, password fields are not recorded anywhere. You should simply reset the password using sp_password. You don't have to know the old password
0
 
LVL 25

Expert Comment

by:imitchie
ID: 20392964
I see where you're coming from. Please have a look at this Ppt, which contains a link to another Ppt.
http://www.sqldbatips.com/presentations/REALLY_HACKING_SQL.ppt
If that is too hard, just get
http://www.downloadjunction.com/product/store/4329/index.html
0
 

Author Comment

by:bcameron70
ID: 20392976
I have the SP password, I am trying to reverse-engineer the dbase connection by finding out what the application is throwing at the dbase for a password so I can make the dbase password match.

The program was compiled and my guy who had done it is gone, so I am trying to avoid re-compiling the program is possible.
0
 

Author Comment

by:bcameron70
ID: 20392984
just saw your update after posting my reply, looks like you got yours in first, I'll be back in a few to try, thank you
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:bcameron70
ID: 20393267
Ive tried the utility to see if it catches and nothing comes across.  I tried logging into another machine on the network to pass through but no luck.

I tried ethereal jsut in case, but I do not see anything passing of relevance.

Any other thoughts?
0
 
LVL 25

Accepted Solution

by:
imitchie earned 500 total points
ID: 20393376
I never had problems with ethereal, and it doesn't matter whether it's 2000/2005, because it's the client providing the info.. I can't think of anything else except maybe you have misused some settings. Try Omnipeek if that's easier to use
0
 

Author Comment

by:bcameron70
ID: 20393387
I'll give omnipeek a shot.

Ethereal has been very successful in the past for me, I did not see any passwords traversing as mentioned in the ppt link you sent.  Maybe I just have an untrained eye.

0
 

Author Comment

by:bcameron70
ID: 20414688
Thank you for your effort on this, I ended up allowing all the sql permissions to the user and then opened up the linked tabled and applying another password which seemed to work.

Thank you again
0
 

Author Closing Comment

by:bcameron70
ID: 31412241
Wanted to award points for trying
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Recently, when I was asked to create a new SQL 2005 cluster, Microsoft released a new service pack for MS SQL 2005 what is Service Pack 3. When I finished the installation of MS SQL 2005 I found myself troubled why the installation of SP3 failed …
Introduction This article will provide a solution for an error that might occur installing a new SQL 2005 64-bit cluster. This article will assume that you are fully prepared to complete the installation and describes the error as it occurred durin…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video discusses moving either the default database or any database to a new volume.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now