By Sriram Sanka

  • $riram $anka


    The experiences, Test cases, views, and opinions etc expressed in this website are my own and does not reflect the views or opinions of my employer. This site is independent of and does not represent Oracle Corporation in any way. Oracle does not officially sponsor, approve, or endorse this site or its content.Product and company names mentioned in this website may be the trademarks of their respective owners.

  • Likes So far

    • 93,340 hits
  • Enter your email address to follow this blog and receive notifications of new posts by email.

Password Hash In Oracle 11g

Posted by Sriram Sanka on June 7, 2011


Let `s discuss about The Changes Of  DBA_USERS Especially In PASSWORD Column In Oracle 11g and 10g.

DBA_USERS   Gives Us Information about all users of the database.

And it contains password hash value In its PASSWORD Column

ind>  col TABLE_NAME format a10
ind> col COLUMN_NAME format a10
ind> col COMMENTS format a25
ind>  select TABLE_NAME,COLUMN_NAME, COMMENTS
  2   from dict_columns
  3   where TABLE_NAME='DBA_USERS' and COLUMN_NAME='PASSWORD';

TABLE_NAME COLUMN_NAM COMMENTS
---------- ---------- -------------------------
DBA_USERS  PASSWORD   Encrypted password

1 row selected.

Yes..It contains the encrypted value Based On Concatenation of Username and Password
This Is How/why two Users with same password can have different Encrypted hash values.

ind> create user satya identified by satya;

User created.

ind>  create user kalyani identified by satya;

User created.

ind> select username,password
  2  from dba_users
  3  where USERNAME in ('KALYANI','SATYA');

USERNAME                       PASSWORD
------------------------------ ------------------------------
KALYANI                        E81F7CB996A56BA9
SATYA                          218ED5615AAE5F6B

2 rows selected.

ind> drop user satya;

User dropped.

ind> drop user satyab;
drop user satyab
          *
ERROR at line 1:
ORA-01918: user 'SATYAB' does not exist

ind> create user satya identified by backpain;

User created.

ind> create user satyab identified by ackpain;

User created.

ind> select username,password
  2  from dba_users
  3  where username like 'SATYA%';

USERNAME                       PASSWORD
------------------------------ ------------------------------
SATYA                          458070F68E74206E
SATYAB                         458070F68E74206E

2 rows selected.

Here You can Observe that User SATYA and SATYAB with same hash value,
as the Concatenation of USERNAME and PASSWORD are Same.

But In Oracle 11g Oracle Wont store any password hash values in DBA_USERS.PASSWORD column.As Per the Document

http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/statviews_5081.htm#REFRN23302

Password Column  is deprecated in favor of   the AUTHENTICATION_TYPE column

But You can get the password from “User$“.

SQL> create User a identified by "a";

User created.

SQL> create User b identified by "a";

User created.

SQL> select dbms_metadata.get_ddl('USER','A') from dual;

DBMS_METADATA.GET_DDL('USER','A')
--------------------------------------------------------------------------------

   CREATE USER "A" IDENTIFIED BY VALUES 'S:298EDEE1721E71B950D55CCB9ABA7EE5C596E
A6B0CCFF098E88889B98BD5;AFCC9478DFBF9029'
      DEFAULT TABLESPACE "USERS"
      TEMPORARY TABLESPACE "TEMP"

SQL> select dbms_metadata.get_ddl('USER','B') from dual;

DBMS_METADATA.GET_DDL('USER','B')
--------------------------------------------------------------------------------

   CREATE USER "B" IDENTIFIED BY VALUES 'S:25E85C1466288EE377681D131DF1920B33448
CD4108F8DDFC580A3315A39;9017AAA5BF2D9732'
      DEFAULT TABLESPACE "USERS"
      TEMPORARY TABLESPACE "TEMP"

SQL> select name, password, spare4 from sys.user$ where name ='A'
  2  ;

NAME                           PASSWORD
------------------------------ ------------------------------
SPARE4
--------------------------------------------------------------------------------
A                              AFCC9478DFBF9029
S:298EDEE1721E71B950D55CCB9ABA7EE5C596EA6B0CCFF098E88889B98BD5

SQL> select password,username from dba_users
  2  where length(username)=1;

PASSWORD                       USERNAME
------------------------------ ------------------------------
                               A
                               B

SQL>

You can Find My Post here at Orafaq.
http://www.orafaq.com/forum/mv/msg/171754/510127/136607/#msg_510127
For more reference
http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/statviews_5081.htm#REFRN23302
Hope You enjoyed It 🙂
Sriram

103 Responses to “Password Hash In Oracle 11g”

  1. Hi! I just would like to give you a huge thumbs up
    for your great information you have right here on this post.

    I will be returning to your blog for more soon.

    Like

  2. I read this post completely regarding the resemblance of most recent
    and previous technologies, it’s awesome article.

    Like

  3. You need to take part in a contest for one of the highest quality blogs online.
    I will recommend this blog!

    Like

  4. Having read this I believed it was very informative.
    I appreciate you finding the time and energy to put this content
    together. I once again find myself personally spending way too much time
    both reading and posting comments. But so what, it
    was still worth it!

    Like

  5. I was recommended this website by my cousin. I am not sure whether this post is written by him as
    no one else know such detailed about my difficulty. You’re incredible!
    Thanks!

    Like

  6. Hi, after reading this awesome article i am too happy to share my experience here with mates.

    Like

  7. hi!,I like your writing so much! percentage we keep up a correspondence more approximately your post
    on AOL? I require a specialist on this space to unravel my
    problem. May be that’s you! Looking forward to look you.

    Like

  8. This is the right webpage for anyone who wishes to understand this topic.
    You realize a whole lot its almost hard to argue with you (not that I actually will need to…HaHa).
    You definitely put a new spin on a topic that
    has been discussed for a long time. Great stuff,
    just great!

    Like

  9. My brother suggested I may like this blog. He used to be totally right.
    This post actually made my day. You cann’t imagine simply how so much
    time I had spent for this information! Thanks!

    Like

  10. I just like the valuable information you supply for your articles.
    I will bookmark your weblog and test again right here frequently.
    I’m relatively certain I will learn plenty of new stuff proper here!
    Best of luck for the next!

    Like

  11. Unquestionably believe that which you said. Your favorite reason appeared to be on the internet the simplest thing
    to be aware of. I say to you, I definitely get annoyed while people think about worries that they
    just do not know about. You managed to hit the nail upon the top as well as defined out the whole thing without having side effect
    , people could take a signal. Will probably be back to get more.

    Thanks

    Like

  12. Thank you for every other excellent post. The place
    else could anybody get that type of information in such an ideal way of writing?
    I’ve a presentation next week, and I am at the look for such info.

    Like

  13. Thanks for ones marvelous posting! I actually enjoyed reading it, you may
    be a great author.I will make sure to bookmark your blog and will
    come back from now on. I want to encourage that you continue your great posts, have
    a nice weekend!

    Like

  14. Excellent post. I was checking continuously this blog and I’m impressed!
    Very useful info specially the last part 🙂 I care for such information much.
    I was seeking this particular info for a long time. Thank you and good
    luck.

    Like

  15. Baby said

    We’re a group of volunteers and opening a new scheme in our community.
    Your web site offered us with valuable information to work
    on. You’ve done a formidable job and our entire community will be thankful to you.

    Like

  16. Your style is really unique in comparison to other people I have read stuff from.
    I appreciate you for posting when you have the
    opportunity, Guess I will just bookmark this web site.

    Like

  17. dazoveride said

    Hi, could you tell me if there’s a way to reverse the concatenation and subject the hash to brute force or dictionary attack using tool such as hashcat. The objective is to ensure no weak passwords are being used such as password123.
    Cheers
    D

    Like

  18. ӏ feel this іs among the such a lot signifіcant information for me.
    And i’m glad studying your artісle. ᗷut should statement on few basic issues, The
    web site taste iѕ wonderful, the articles is actuаlly ᥱxceⅼlent : D.
    Excеllent job, cheers

    Like

  19. I usеd to be able to find good advice from your blog posts.

    Like

  20. Wɦen someone writes an article he/ѕhe retains the plan of
    a uѕer in his/her mind that hoѡ a user can undeгstand it.

    So thɑt’s why this article is amazing. Thanks!

    Like

  21. I used tο be able to find gooԀ information from your blog posts.

    Like

  22. Hi therе! I just ԝould like to give you a big thumbs up for
    the excellent info you have got here on this post. I’ll be returning
    to your ᴡeb site for more soon.

    Like

  23. Hiya, I am really glad I’ve found this information. Nowadays bloggers publish only about gossips and net and this is actually irritating. A good website with interesting content, this is what I need. Thank you for keeping this site, I will be visiting it. Do you do newsletters? Can not find it.

    Like

  24. That is very interesting, You are an overly professional blogger. I have joined your feed and look forward to in the hunt for extra of your wonderful post. Additionally, I’ve shared your site in my social networks. why not try this out: http://tinyurl.com/jjq2yw8

    Like

  25. Hurrah, that’s what I was looking for, what a information! existing here at this blog, thanks admin of this website.

    Like

  26. Good job! Well written!

    Like

  27. Does уoսr blog have a contact pаge? I’m having problеms locating it but,
    I’d like to shoot you an email. I’ve ɡоt some іdeas for your blog you might be interested
    in hearing. Either way, great site and I look forward
    to seeing it improᴠe over time.

    Like

  28. beard club said

    I don’t like your template but your posts are quite great so I will check back! Also i can’t join to your rss feed! Any ideea why?

    Like

  29. “Great Blogpost! I couldn’t refrain from commenting. _Perfectly written!”

    Like

  30. Abram said

    I got this site from my pal who told me concerning this site and now this time I am visiting this website and reading very informative posts at this place.|

    Like

  31. Carri said

    Great post.|

    Like

  32. Gustavo said

    Have you ever thought about writing an ebook or guest authoring on other blogs? I have a blog based on the same information you discuss and would love to have you share some stories/information. I know my viewers would enjoy your work. If you’re even remotely interested, feel free to shoot me an e-mail.|

    Like

  33. Maggie said

    Hello there, just changed into aware of your weblog via Google, and found that it’s really informative. I’m going to be careful for brussels. I’ll appreciate should you proceed this in future. Numerous other folks might be benefited from your writing. Cheers!|

    Like

  34. Arianne said

    This is very interesting, You are a very skilled blogger. I have joined your feed and look forward to seeking more of your excellent post. Also, I’ve shared your site in my social networks!|

    Like

  35. Jared said

    Interesting blog! Is your theme custom made or did you download it from somewhere? A design like yours with a few simple adjustements would really make my blog stand out. Please let me know where you got your theme. Bless you|

    Like

  36. Nickolas said

    If some one wants expert view regarding running a blog afterward i propose him/her to pay a visit this webpage, Keep up the fastidious work.|

    Like

  37. Youlanda said

    If some one needs to be updated with most recent technologies after that he must be pay a quick visit this web site and be up to date everyday.|

    Like

  38. Grant said

    I’ve been browsing on-line more than 3 hours these days, yet I by no means discovered any interesting article like yours. It is beautiful worth enough for me. Personally, if all website owners and bloggers made just right content as you did, the web shall be much more useful than ever before.|

    Like

  39. Julio said

    hello!,I really like your writing very so much! proportion we be in contact more about your article on AOL? I need an expert on this house to solve my problem. May be that’s you! Looking ahead to peer you. |

    Like

  40. Stacey said

    I delight in, result in I discovered just what I used to be looking for. You have ended my four day long hunt! God Bless you man. Have a great day. Bye|

    Like

  41. Merissa said

    Nice blog right here! Additionally your website loads up very fast! What host are you the usage of? Can I get your associate link to your host? I wish my website loaded up as fast as yours lol|

    Like

  42. Omer said

    We’re a group of volunteers and opening a new scheme in our community. Your site provided us with valuable info to work on. You’ve done a formidable job and our whole community will be grateful to you.|

    Like

  43. Dan said

    Appreciate the recommendation. Let me try it out.|

    Like

  44. Ulrike said

    I feel this is one of the so much significant info for me. And i’m happy studying your article. However wanna remark on few basic issues, The site style is wonderful, the articles is actually excellent : D. Excellent task, cheers|

    Like

  45. Grover said

    Link exchange is nothing else except it is just placing the other person’s weblog link on your page at appropriate place and other person will also do same in favor of you.|

    Like

  46. Tasia said

    You are so awesome! I don’t believe I’ve read something like that before. So great to discover somebody with some genuine thoughts on this topic. Really.. many thanks for starting this up. This site is one thing that’s needed on the internet, someone with some originality!|

    Like

  47. Adela said

    Heya i am for the primary time here. I found this board and I to find It really helpful & it helped me out a lot. I am hoping to provide one thing again and aid others like you helped me.|

    Like

  48. Nelly said

    Very soon this web site will be famous amid all blog people, due to it’s good articles|

    Like

  49. Carmelia said

    Definitely believe that which you stated. Your favorite justification seemed to be on the web the simplest thing to be aware of. I say to you, I definitely get irked while people think about worries that they just do not know about. You managed to hit the nail upon the top and defined out the whole thing without having side-effects , people could take a signal. Will likely be back to get more. Thanks|

    Like

  50. Еveryone loves what you guys are usuaⅼly up too. Suϲh clever work and reporting!
    Keep up the great works guys I’ve іncluԀed yоu
    guys to my blοgroll.

    Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

 
Tales From A Lazy Fat DBA

Its all about Databases & their performance, troubleshooting & much more .... ¯\_(ツ)_/¯

Thinking Out Loud

Michael T. Dinh, Oracle DBA

Notes On Oracle

by Mehmet Eser

Oracle Diagnostician

Performance troubleshooting as exact science

deveshdba

get sum oracle stuffs

Know-Oracle

Oracle Cloud ERP Blog by Team CLT

Data Warehousing with Oracle

Dani Schnider's Blog

ORASteps

Oracle DBA's Daily Work

DBAspaceblog.com

Welcome everyone!! The idea of this blog is to help the DBA in their daily tasks. Enjoy.

Anand's Data Stories

Learn. Share. Repeat.

Tanel Poder's blog: Core IT for geeks and pros

Oracle Performance Tuning, Troubleshooting, Internals

Yet Another OCM

Journey as an Oracle Certified Master

%d bloggers like this: