Solved

oarcle 11g database password hashes

Posted on 2013-02-06
6
591 Views
Last Modified: 2013-02-07
Can I ask what table or view 11g db user password hashes are stored in. I always thought they were in dba_user.password but this field seems to be blank.

In sysusers there is also a password field but it only seems to be populated for certain db accounts and not others.

We are trying to do a security healthcheck and I wont ask for hacking tools on how to crack the passwords, just to find the hashes.
0
Comment
Question by:pma111
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 11

Accepted Solution

by:
SANDY_SK earned 250 total points
ID: 38859050
The passwords are not stored in dba_user in 11g anymore, it is in the SYS.USER$ table

See below link for further details
http://blog.flimatech.com/2011/07/17/changing-oracle-password-in-11g-using-alter-user-identified-by-values/
0
 
LVL 3

Author Comment

by:pma111
ID: 38859089
Any idea why only some accounts with have a record in the password column and others would not?
0
 
LVL 11

Expert Comment

by:SANDY_SK
ID: 38859166
If you read thru the link that i gave you, you can see that if only “SPARE4¿ is used to set the password the password version is 11g and in SYS.USER$ password value becomes NULL
0
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

 
LVL 3

Author Comment

by:pma111
ID: 38859194
So in those instances where is the password hash? Or does it mean the password is blank, i.e. no password?
0
 
LVL 74

Assisted Solution

by:sdstuber
sdstuber earned 250 total points
ID: 38859229
0
 
LVL 11

Expert Comment

by:SANDY_SK
ID: 38859247
I think the article given by sdstuber will give you the complete details.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
database access query MSSQL 3 46
Export individual report to pdf 2 41
T-SQL: need to reset a declared variable 4 33
Using a combo box to search a form. 3 36
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
Azure Functions is a solution for easily running small pieces of code, or "functions," in the cloud. This article shows how to create one of these functions to write directly to Azure Table Storage.
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.
This video shows how to copy an entire tablespace from one database to another database using Transportable Tablespace functionality.

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question