Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

oarcle 11g database password hashes

Posted on 2013-02-06
6
588 Views
Last Modified: 2013-02-07
Can I ask what table or view 11g db user password hashes are stored in. I always thought they were in dba_user.password but this field seems to be blank.

In sysusers there is also a password field but it only seems to be populated for certain db accounts and not others.

We are trying to do a security healthcheck and I wont ask for hacking tools on how to crack the passwords, just to find the hashes.
0
Comment
Question by:pma111
  • 3
  • 2
6 Comments
 
LVL 11

Accepted Solution

by:
SANDY_SK earned 250 total points
ID: 38859050
The passwords are not stored in dba_user in 11g anymore, it is in the SYS.USER$ table

See below link for further details
http://blog.flimatech.com/2011/07/17/changing-oracle-password-in-11g-using-alter-user-identified-by-values/
0
 
LVL 3

Author Comment

by:pma111
ID: 38859089
Any idea why only some accounts with have a record in the password column and others would not?
0
 
LVL 11

Expert Comment

by:SANDY_SK
ID: 38859166
If you read thru the link that i gave you, you can see that if only “SPARE4¿ is used to set the password the password version is 11g and in SYS.USER$ password value becomes NULL
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
LVL 3

Author Comment

by:pma111
ID: 38859194
So in those instances where is the password hash? Or does it mean the password is blank, i.e. no password?
0
 
LVL 74

Assisted Solution

by:sdstuber
sdstuber earned 250 total points
ID: 38859229
0
 
LVL 11

Expert Comment

by:SANDY_SK
ID: 38859247
I think the article given by sdstuber will give you the complete details.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
These days, all we hear about hacktivists took down so and so websites and retrieved thousands of user’s data. One of the techniques to get unauthorized access to database is by performing SQL injection. This article is quite lengthy which gives bas…
Via a live example show how to connect to RMAN, make basic configuration settings changes and then take a backup of a demo database
This video shows how to copy a database user from one database to another user DBMS_METADATA.  It also shows how to copy a user's permissions and discusses password hash differences between Oracle 10g and 11g.

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question