Solved

oarcle 11g database password hashes

Posted on 2013-02-06
6
587 Views
Last Modified: 2013-02-07
Can I ask what table or view 11g db user password hashes are stored in. I always thought they were in dba_user.password but this field seems to be blank.

In sysusers there is also a password field but it only seems to be populated for certain db accounts and not others.

We are trying to do a security healthcheck and I wont ask for hacking tools on how to crack the passwords, just to find the hashes.
0
Comment
Question by:pma111
  • 3
  • 2
6 Comments
 
LVL 11

Accepted Solution

by:
SANDY_SK earned 250 total points
ID: 38859050
The passwords are not stored in dba_user in 11g anymore, it is in the SYS.USER$ table

See below link for further details
http://blog.flimatech.com/2011/07/17/changing-oracle-password-in-11g-using-alter-user-identified-by-values/
0
 
LVL 3

Author Comment

by:pma111
ID: 38859089
Any idea why only some accounts with have a record in the password column and others would not?
0
 
LVL 11

Expert Comment

by:SANDY_SK
ID: 38859166
If you read thru the link that i gave you, you can see that if only “SPARE4¿ is used to set the password the password version is 11g and in SYS.USER$ password value becomes NULL
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 3

Author Comment

by:pma111
ID: 38859194
So in those instances where is the password hash? Or does it mean the password is blank, i.e. no password?
0
 
LVL 73

Assisted Solution

by:sdstuber
sdstuber earned 250 total points
ID: 38859229
0
 
LVL 11

Expert Comment

by:SANDY_SK
ID: 38859247
I think the article given by sdstuber will give you the complete details.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

CCModeler offers a way to enter basic information like entities, attributes and relationships and export them as yEd or erviz diagram. It also can import existing Access or SQL Server tables with relationships.
These days, all we hear about hacktivists took down so and so websites and retrieved thousands of user’s data. One of the techniques to get unauthorized access to database is by performing SQL injection. This article is quite lengthy which gives bas…
Via a live example show how to connect to RMAN, make basic configuration settings changes and then take a backup of a demo database
Via a live example, show how to take different types of Oracle backups using RMAN.

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question