• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 600
  • Last Modified:

oarcle 11g database password hashes

Can I ask what table or view 11g db user password hashes are stored in. I always thought they were in dba_user.password but this field seems to be blank.

In sysusers there is also a password field but it only seems to be populated for certain db accounts and not others.

We are trying to do a security healthcheck and I wont ask for hacking tools on how to crack the passwords, just to find the hashes.
0
pma111
Asked:
pma111
  • 3
  • 2
2 Solutions
 
SANDY_SKCommented:
The passwords are not stored in dba_user in 11g anymore, it is in the SYS.USER$ table

See below link for further details
http://blog.flimatech.com/2011/07/17/changing-oracle-password-in-11g-using-alter-user-identified-by-values/
0
 
pma111Author Commented:
Any idea why only some accounts with have a record in the password column and others would not?
0
 
SANDY_SKCommented:
If you read thru the link that i gave you, you can see that if only “SPARE4¿ is used to set the password the password version is 11g and in SYS.USER$ password value becomes NULL
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
pma111Author Commented:
So in those instances where is the password hash? Or does it mean the password is blank, i.e. no password?
0
 
sdstuberCommented:
0
 
SANDY_SKCommented:
I think the article given by sdstuber will give you the complete details.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now