OraFAQ Forum: Security » Getting password

Home » RDBMS Server » Security » Getting password (10g)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Getting password [message #686314]

Sat, 23 July 2022 20:49

RM33
Messages: 11
Registered: December 2013
Location: New York City

Junior Member

Here's my situation. A former developer left our group. She's gone we can't find her. She did not leave her password with us. I tried to find her password and found this . . .

IF pi_password IS NOT NULL
THEN
v_sql_statement := 'ALTER USER ' || pi_ref_oracle_id ||
' IDENTIFIED BY ' || pi_password;
EXECUTE IMMEDIATE v_sql_statement;
END IF;

It seems there's a table in Oracle to save passwords to. So how can I get the password.

I have her ID. Can I changer her password, if so how? I don't know her old password.

Report message to a moderator

Re: Getting password [message #686315 is a reply to message #686314]

Sun, 24 July 2022 00:43

Michel Cadot
Messages: 68506
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

1/ Oracle does not save the password in clear but a hashed value of it and you can't get the clear password from this hashed value.

2/ A DBA can change the password of an account without knowing the current one using the statement you mentioned.

Report message to a moderator

Previous Topic:	Remove and Disable the HSM
Next Topic:	ORA-01017: invalid username/password

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Wed Sep 27 17:56:58 CDT 2023