Sriram Sanka

Databases | Cloud | Infrastructure | Security |

Password Hash In Oracle 11g

Posted by Sriram Sanka on June 7, 2011

Let `s discuss about The Changes Of  DBA_USERS Especially In PASSWORD Column In Oracle 11g and 10g.

DBA_USERS   Gives Us Information about all users of the database.

And it contains password hash value In its PASSWORD Column

[code]
ind> col TABLE_NAME format a10
ind> col COLUMN_NAME format a10
ind> col COMMENTS format a25
ind> select TABLE_NAME,COLUMN_NAME, COMMENTS
2 from dict_columns
3 where TABLE_NAME=’DBA_USERS’ and COLUMN_NAME=’PASSWORD’;

TABLE_NAME COLUMN_NAM COMMENTS
———- ———- ————————-
DBA_USERS PASSWORD Encrypted password

1 row selected.
[/code]

Yes..It contains the encrypted value Based On Concatenation of Username and Password
This Is How/why two Users with same password can have different Encrypted hash values.

[code]
ind> create user satya identified by satya;

User created.

ind> create user kalyani identified by satya;

User created.

ind> select username,password
2 from dba_users
3 where USERNAME in (‘KALYANI’,’SATYA’);

USERNAME PASSWORD
—————————— ——————————
KALYANI E81F7CB996A56BA9
SATYA 218ED5615AAE5F6B

2 rows selected.

ind> drop user satya;

User dropped.

ind> drop user satyab;
drop user satyab
*
ERROR at line 1:
ORA-01918: user ‘SATYAB’ does not exist

ind> create user satya identified by backpain;

User created.

ind> create user satyab identified by ackpain;

User created.

ind> select username,password
2 from dba_users
3 where username like ‘SATYA%’;

USERNAME PASSWORD
—————————— ——————————
SATYA 458070F68E74206E
SATYAB 458070F68E74206E

2 rows selected.
[/code]

Here You can Observe that User SATYA and SATYAB with same hash value,
as the Concatenation of USERNAME and PASSWORD are Same.

But In Oracle 11g Oracle Wont store any password hash values in DBA_USERS.PASSWORD column.As Per the Document

http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/statviews_5081.htm#REFRN23302

Password Column  is deprecated in favor of   the AUTHENTICATION_TYPE column

But You can get the password from “User$“.

[code]
SQL> create User a identified by "a";

User created.

SQL> create User b identified by "a";

User created.

SQL> select dbms_metadata.get_ddl(‘USER’,’A’) from dual;

DBMS_METADATA.GET_DDL(‘USER’,’A’)
——————————————————————————–

CREATE USER "A" IDENTIFIED BY VALUES ‘S:298EDEE1721E71B950D55CCB9ABA7EE5C596E
A6B0CCFF098E88889B98BD5;AFCC9478DFBF9029’
DEFAULT TABLESPACE "USERS"
TEMPORARY TABLESPACE "TEMP"

SQL> select dbms_metadata.get_ddl(‘USER’,’B’) from dual;

DBMS_METADATA.GET_DDL(‘USER’,’B’)
——————————————————————————–

CREATE USER "B" IDENTIFIED BY VALUES ‘S:25E85C1466288EE377681D131DF1920B33448
CD4108F8DDFC580A3315A39;9017AAA5BF2D9732′
DEFAULT TABLESPACE "USERS"
TEMPORARY TABLESPACE "TEMP"

SQL> select name, password, spare4 from sys.user$ where name =’A’
2 ;

NAME PASSWORD
—————————— ——————————
SPARE4
——————————————————————————–
A AFCC9478DFBF9029
S:298EDEE1721E71B950D55CCB9ABA7EE5C596EA6B0CCFF098E88889B98BD5

SQL> select password,username from dba_users
2 where length(username)=1;

PASSWORD USERNAME
—————————— ——————————
A
B

SQL>
[/code]

You can Find My Post here at Orafaq.
http://www.orafaq.com/forum/mv/msg/171754/510127/136607/#msg_510127
For more reference
http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/statviews_5081.htm#REFRN23302
Hope You enjoyed It 🙂
Sriram

103 Responses to “Password Hash In Oracle 11g”


  1. […] For more details on the password hash, see Password Hash In Oracle 11g. […]


  2. Twanna Rolland

    Let `s discuss about The Changes Of  DBA_USERS Especially In PASSWORD Column In Oracle 11g and 10g. DBA_USERS   Gives Us Information about all users of the database. And it contains password hash value In its PASSWORD Column Yes..It contains the encryp…

  3. temp's avatar

    temp said


    I absolutely love your blog anԀ find many of your post’s to be exactly
    what I’m looking for. Do you offer guеst writers to write content for you?
    I wouldn’t mind composing a post or elaboratіng on a
    numbег of tҺe subjects you ѡrite in relation to here.
    Again, awesomе blog!


  4. We are a group of volunteers and opening a new scheme in our community.
    Your site provided us with valuable info to work on.
    You’ve done an impressive job and our entire community
    will be grateful to you.

  5. click here's avatar

    click here said


    whoah this blog is magnificent i like studying your posts.
    Keep up the great work! You realize, lots of people are searching around for this info,
    you could help them greatly.


  6. I’d like to find out more? I’d love to find out
    some additional information.


  7. If you wish for to improve your knowledge only keep visiting this web
    site and be updated with the hottest information posted here.


  8. Hey thеre, You have done an incredible job. ӏ will dеfinitely digg it ɑnd personally recommend tto myy friends.
    І’m connfident theү’ll Ƅе benefited from tɦis website.


  9. Hey just wanted to give you a quick heads up.
    The words in your article seem to be running off the screen in Safari.
    I’m not sure if this is a formatting issue or something to do with web browser compatibility but I thought
    I’d post to let you know. The layout look great though!
    Hope you get the issue solved soon. Cheers


  10. Its not my first time to visit this web page,
    i am browsing this website dailly and obtain good data from here daily.


  11. I really like what you guys are up too. This kind of clever work and
    exposure! Keep up the awesome works guys I’ve
    incorporated you guys to our blogroll.


  12. Hi there, just wanted to say, I loved this blog post.
    It was inspiring. Keep on posting!


  13. Wow, this paragraph is good, my sister is analyzing these kinds
    of things, so I am going to inform her.


  14. Every weekend i ussd to go to see this web page, for the
    reason that i want enjoyment, forr the reason that this this web
    page conations genuinely pleasant funny information too.

  15. sbo's avatar

    sbo said


    It’s great that you are getting ideas from this piece of writing as well as from
    our discussion made at this time.


  16. I’m impressed, I must say. Seldom do I come across a blog that’s
    both equally educative and interesting, and let me tell you, you
    have hit the nail on the head. The issue is something
    that not enough men and women are speaking intelligently about.
    I’m very happy I found this during my search for something relating to this.


  17. I was recommended this blog by my cousin. I am not sure whether his post is written by him as
    nobody else knoww such detailed about my problem.
    You’re wonderful! Thanks!


  18. I am actually glad to read this webpage posts which consists of plenty of helpful data,
    thanks for providing these information.


  19. Thanks for another informative web site. The place else could I get that type of info written in such a perfect approach?

    I’ve a project that I’m just now working on, and I
    have been at the glance out for such info.


  20. I’m amazed, I must say. Seldom do I encounter a blog that’s equalkly educative
    and interesting, and without a doubt, you have hit the nail on the head.
    The problem iss an issue thhat not enough men and women are speaking intelligently about.
    I am very happy I stumbled across this iin my search for something regarding this.


  21. I don’t drop a leave a response, however after reading through a few of the comments on Password Hash In Oracle 11g .

    I actually do have some questions for you if it’s allright.
    Could it be simply me or does it look as if like some of
    these responses come across like they are written by
    brain dead folks? 😛 And, if you are writing on additional online sites, I’d like to
    keep up with everything fresh you have to post.
    Could you post a list of every one of all your social community sites
    like your Facebook page, twitter feed, or linkedin profile?

  22. online's avatar

    online said


    I absolutely love your blog and find a lot of your post’s to be just what
    I’m looking for. Does one offer guest writers to write content for you?
    I wouldn’t mind composing a post or elaborating on a lot of the subjects you write with regards to here.
    Again, awesome web site!

  23. Hunter's avatar

    Hunter said


    Hey There. I discovered your weblog the usage of msn. This is a really well written article.
    I’ll make sure to bookmark it and come back to learn more of your helpful
    info. Thank you for the post. I will certainly return.


  24. There is certainly a great deal to learn about this issue.
    I really like all of the points you made.


  25. Hello there, You’ve done an excellent job. I’ll certainly digg it and personally
    recommend to my friends. I am sure they will be benefited from this web site.


  26. That is really fascinating, You are an excessively professional blogger.

    I have joined your feed and stay up for searching for extra
    of your fantastic post. Additionally, I’ve shared your web site in my social networks


  27. I feel this is among the so much significant info for me.
    And i am happy reading your article. However want to commentary on few normal things, The site taste
    is wonderful, the articles is actually nice :
    D. Excellent job, cheers

  28. metal's avatar

    metal said


    Excellent blog! Do you have any helpful hints
    for aspiring writers? I’m hoping to start my own website
    soon but I’m a little lost on everything. Would you advise starting with
    a free platform like WordPress or go for a paid option? There are so many options out there that I’m totally overwhelmed ..

    Any ideas? Thanks!


  29. Asking questions are truly good thing if you are not understanding something fully, however
    this article offers good understanding even.


  30. I read this paragraph completely about the resemblance of newest and preceding technologies, it’s awesome
    article.

  31. mind's avatar

    mind said


    Every weekend i used to visit this web site, for the reason that i wish for enjoyment, since this this
    web page conations in fact fastidious funny data too.

  32. Grant's avatar

    Grant said


    I am truly happy to glance at this blog posts which carries plenty of helpful information, thanks for providing
    these data.


  33. You can certainly see your skills in the article you write.

    The world hopes for more passionate writers like you who are not afraid
    to say how they believe. At all times go after your heart.

  34. Latrice's avatar

    Latrice said


    I think that everything composed made a bunch of sense.
    However, what about this? suppose you were to create a awesome post title?
    I am not suggesting your information is not
    solid., but what if you added something that
    grabbed a person’s attention? I mean Password Hash In Oracle 11g is kinda plain. You could glance at
    Yahoo’s front page and see how they create article headlines to grab viewers to click.
    You might try adding a video or a related picture
    or two to grab people excited about everything’ve written. In my opinion, it would bring your
    posts a little livelier.


  35. Does your website have a contact page? I’m having problems
    locating it but, I’d like to shoot you an email.
    I’ve got some suggestions for your blog you might be interested in hearing.
    Either way, great blog and I look forward to seeing it develop
    over time.


  36. Tɦіs website was… how do I say it? Rеlevant!! Ϝinally I have found something that helped me.
    Thanks a lot!


  37. Thank you for the good writeup. It actually used to be a
    leisure account it. Glance advanced to more brought agreeable from you!
    However, how can we keep in touch?


  38. I always spent my half an hour to read this webpage’s posts everyday along with a cup of coffee.

  39. apk full's avatar

    apk full said


    Wow that was unusual. I just wrote an incredibly long comment but after I clicked submit
    my comment didn’t appear. Grrrr… well I’m not writing all that over again.

    Anyway, just wanted to say excellent blog!

  40. melaleuca's avatar

    melaleuca said


    Your style is really unique compared to other folks I have read stuff from.
    I appreciate you for posting when you have the opportunity,
    Guess I’ll just bookmark this site.


  41. I’m impressed, I must say. Rarely do I come across a blog that’s equally educative and entertaining, and let me tell you, you’ve hit the nail on the head.
    The problem is something that not enough men and women are speaking intelligently about.
    I am very happy that I came across this in my search for something relating to this.


  42. Hello There. I found your blog using msn. This is a very well written article.
    I’ll make sure to bookmark it and return to learn more of your helpful info.
    Thank you for the post. I will definitely return.


  43. I was able to find good information from your content.

  44. anal ,'s avatar

    anal , said


    This is the right site for anyone who hopes to understand this topic.
    You know so much its almost hard to argue with you (not that I really would
    want to…HaHa). You definitely put a fresh spin on a topic
    which has been discussed for ages. Wonderful stuff, just
    wonderful!


  45. Having read this I believed it was really enlightening.
    I appreciate you taking the time and effort to put this information together.
    I once again find myself personally spending way too much time both reading and commenting.
    But so what, it was still worthwhile!


  46. Hey there! Do you use Twitter? I’d like to follow you if that would be ok.

    I’m definitely enjoying your blog and look forward to new updates.


  47. Hi there! I could have sworn I’ve visited this site before but after looking at a few of the
    articles I realized it’s new to me. Nonetheless, I’m
    definitely delighted I discovered it and I’ll be bookmarking it and checking back regularly!

  48. pesantren's avatar

    pesantren said


    Hello, I enjoy reading all of your article. I wanted to write a little comment to support you.


  49. We are a group of volunteers and opening a new scheme in our
    community. Your website provided us with valuable information to work on. You’ve done an impressive job and our whole community will be grateful to you.


  50. We’re a group of volunteers and starting a new scheme in our community.
    Your site provided us with valuable information to work on. You’ve done an impressive job and our whole community will be grateful to you.

Leave a Reply

 

Discover more from Sriram Sanka

Subscribe now to keep reading and get access to the full archive.

Continue reading