Password Hash In Oracle 11g
Posted by Sriram Sanka on June 7, 2011
Let `s discuss about The Changes Of DBA_USERS Especially In PASSWORD Column In Oracle 11g and 10g.
DBA_USERS Gives Us Information about all users of the database.
And it contains password hash value In its PASSWORD Column
ind> col TABLE_NAME format a10 ind> col COLUMN_NAME format a10 ind> col COMMENTS format a25 ind> select TABLE_NAME,COLUMN_NAME, COMMENTS 2 from dict_columns 3 where TABLE_NAME='DBA_USERS' and COLUMN_NAME='PASSWORD'; TABLE_NAME COLUMN_NAM COMMENTS ---------- ---------- ------------------------- DBA_USERS PASSWORD Encrypted password 1 row selected.
Yes..It contains the encrypted value Based On Concatenation of Username and Password
This Is How/why two Users with same password can have different Encrypted hash values.
ind> create user satya identified by satya;
User created.
ind> create user kalyani identified by satya;
User created.
ind> select username,password
2 from dba_users
3 where USERNAME in ('KALYANI','SATYA');
USERNAME PASSWORD
------------------------------ ------------------------------
KALYANI E81F7CB996A56BA9
SATYA 218ED5615AAE5F6B
2 rows selected.
ind> drop user satya;
User dropped.
ind> drop user satyab;
drop user satyab
*
ERROR at line 1:
ORA-01918: user 'SATYAB' does not exist
ind> create user satya identified by backpain;
User created.
ind> create user satyab identified by ackpain;
User created.
ind> select username,password
2 from dba_users
3 where username like 'SATYA%';
USERNAME PASSWORD
------------------------------ ------------------------------
SATYA 458070F68E74206E
SATYAB 458070F68E74206E
2 rows selected.
Here You can Observe that User SATYA and SATYAB with same hash value,
as the Concatenation of USERNAME and PASSWORD are Same.
But In Oracle 11g Oracle Wont store any password hash values in DBA_USERS.PASSWORD column.As Per the Document
http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/statviews_5081.htm#REFRN23302
Password Column is deprecated in favor of the AUTHENTICATION_TYPE column
But You can get the password from “User$“.
SQL> create User a identified by "a";
User created.
SQL> create User b identified by "a";
User created.
SQL> select dbms_metadata.get_ddl('USER','A') from dual;
DBMS_METADATA.GET_DDL('USER','A')
--------------------------------------------------------------------------------
CREATE USER "A" IDENTIFIED BY VALUES 'S:298EDEE1721E71B950D55CCB9ABA7EE5C596E
A6B0CCFF098E88889B98BD5;AFCC9478DFBF9029'
DEFAULT TABLESPACE "USERS"
TEMPORARY TABLESPACE "TEMP"
SQL> select dbms_metadata.get_ddl('USER','B') from dual;
DBMS_METADATA.GET_DDL('USER','B')
--------------------------------------------------------------------------------
CREATE USER "B" IDENTIFIED BY VALUES 'S:25E85C1466288EE377681D131DF1920B33448
CD4108F8DDFC580A3315A39;9017AAA5BF2D9732'
DEFAULT TABLESPACE "USERS"
TEMPORARY TABLESPACE "TEMP"
SQL> select name, password, spare4 from sys.user$ where name ='A'
2 ;
NAME PASSWORD
------------------------------ ------------------------------
SPARE4
--------------------------------------------------------------------------------
A AFCC9478DFBF9029
S:298EDEE1721E71B950D55CCB9ABA7EE5C596EA6B0CCFF098E88889B98BD5
SQL> select password,username from dba_users
2 where length(username)=1;
PASSWORD USERNAME
------------------------------ ------------------------------
A
B
SQL>
You can Find My Post here at Orafaq.
http://www.orafaq.com/forum/mv/msg/171754/510127/136607/#msg_510127
For more reference
http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/statviews_5081.htm#REFRN23302
Hope You enjoyed It 🙂
Sriram
My Experiences with Databases & More 
protection compatible warranty said
Hi! I just would like to give you a huge thumbs up
for your great information you have right here on this post.
I will be returning to your blog for more soon.
LikeLike
Brustvergrößerung said
I read this post completely regarding the resemblance of most recent
and previous technologies, it’s awesome article.
LikeLike
pantech element auxiliary said
You need to take part in a contest for one of the highest quality blogs online.
I will recommend this blog!
LikeLike
fisher price ride on tractor said
Having read this I believed it was very informative.
I appreciate you finding the time and energy to put this content
together. I once again find myself personally spending way too much time
both reading and posting comments. But so what, it
was still worth it!
LikeLike
everything starter package definition said
I was recommended this website by my cousin. I am not sure whether this post is written by him as
no one else know such detailed about my difficulty. You’re incredible!
Thanks!
LikeLike
Bruststraffung Fotos said
Hi, after reading this awesome article i am too happy to share my experience here with mates.
LikeLike
Brustvergrößerung Finanzierung said
hi!,I like your writing so much! percentage we keep up a correspondence more approximately your post
on AOL? I require a specialist on this space to unravel my
problem. May be that’s you! Looking forward to look you.
LikeLike
guide gear camo said
This is the right webpage for anyone who wishes to understand this topic.
You realize a whole lot its almost hard to argue with you (not that I actually will need to…HaHa).
You definitely put a new spin on a topic that
has been discussed for a long time. Great stuff,
just great!
LikeLike
disney movies little mermaid said
My brother suggested I may like this blog. He used to be totally right.
This post actually made my day. You cann’t imagine simply how so much
time I had spent for this information! Thanks!
LikeLike
Brustvergrößerung Risiken said
I just like the valuable information you supply for your articles.
I will bookmark your weblog and test again right here frequently.
I’m relatively certain I will learn plenty of new stuff proper here!
Best of luck for the next!
LikeLike
gov extension projector said
Unquestionably believe that which you said. Your favorite reason appeared to be on the internet the simplest thing
to be aware of. I say to you, I definitely get annoyed while people think about worries that they
just do not know about. You managed to hit the nail upon the top as well as defined out the whole thing without having side effect
, people could take a signal. Will probably be back to get more.
Thanks
LikeLike
dress shirt long sleeve said
Thank you for every other excellent post. The place
else could anybody get that type of information in such an ideal way of writing?
I’ve a presentation next week, and I am at the look for such info.
LikeLike
bautizos madrid said
Thanks for ones marvelous posting! I actually enjoyed reading it, you may
be a great author.I will make sure to bookmark your blog and will
come back from now on. I want to encourage that you continue your great posts, have
a nice weekend!
LikeLike
brustvergrößerung said
Excellent post. I was checking continuously this blog and I’m impressed!
Very useful info specially the last part 🙂 I care for such information much.
I was seeking this particular info for a long time. Thank you and good
luck.
LikeLike
Baby said
We’re a group of volunteers and opening a new scheme in our community.
Your web site offered us with valuable information to work
on. You’ve done a formidable job and our entire community will be thankful to you.
LikeLike
Carpet Cleaner said
Your style is really unique in comparison to other people I have read stuff from.
I appreciate you for posting when you have the
opportunity, Guess I will just bookmark this web site.
LikeLike
dazoveride said
Hi, could you tell me if there’s a way to reverse the concatenation and subject the hash to brute force or dictionary attack using tool such as hashcat. The objective is to ensure no weak passwords are being used such as password123.
Cheers
D
LikeLike
beachbody derm exclusive review said
ӏ feel this іs among the such a lot signifіcant information for me.
And i’m glad studying your artісle. ᗷut should statement on few basic issues, The
web site taste iѕ wonderful, the articles is actuаlly ᥱxceⅼlent : D.
Excеllent job, cheers
LikeLike
back pain houston said
I usеd to be able to find good advice from your blog posts.
LikeLike
lower back pain treatment surgery said
Wɦen someone writes an article he/ѕhe retains the plan of
a uѕer in his/her mind that hoѡ a user can undeгstand it.
So thɑt’s why this article is amazing. Thanks!
LikeLike
inkgrabber.com review said
I used tο be able to find gooԀ information from your blog posts.
LikeLike
Derm Exclusive Versus Meaningful Beauty said
Hi therе! I just ԝould like to give you a big thumbs up for
the excellent info you have got here on this post. I’ll be returning
to your ᴡeb site for more soon.
LikeLike
Johana Deroos said
Hiya, I am really glad I’ve found this information. Nowadays bloggers publish only about gossips and net and this is actually irritating. A good website with interesting content, this is what I need. Thank you for keeping this site, I will be visiting it. Do you do newsletters? Can not find it.
LikeLike
FBHackingTools said
That is very interesting, You are an overly professional blogger. I have joined your feed and look forward to in the hunt for extra of your wonderful post. Additionally, I’ve shared your site in my social networks. why not try this out: http://tinyurl.com/jjq2yw8
LikeLike
back pain doctor is called said
Hurrah, that’s what I was looking for, what a information! existing here at this blog, thanks admin of this website.
LikeLike
Edmond Winkler said
Good job! Well written!
LikeLike
Does Beachbody Derm Exclusive Work review said
Does уoսr blog have a contact pаge? I’m having problеms locating it but,
I’d like to shoot you an email. I’ve ɡоt some іdeas for your blog you might be interested
in hearing. Either way, great site and I look forward
to seeing it improᴠe over time.
LikeLike
beard club said
I don’t like your template but your posts are quite great so I will check back! Also i can’t join to your rss feed! Any ideea why?
LikeLike
Jami Schlissel said
“Great Blogpost! I couldn’t refrain from commenting. _Perfectly written!”
LikeLike
Abram said
I got this site from my pal who told me concerning this site and now this time I am visiting this website and reading very informative posts at this place.|
LikeLike
Carri said
Great post.|
LikeLike
Gustavo said
Have you ever thought about writing an ebook or guest authoring on other blogs? I have a blog based on the same information you discuss and would love to have you share some stories/information. I know my viewers would enjoy your work. If you’re even remotely interested, feel free to shoot me an e-mail.|
LikeLike
Maggie said
Hello there, just changed into aware of your weblog via Google, and found that it’s really informative. I’m going to be careful for brussels. I’ll appreciate should you proceed this in future. Numerous other folks might be benefited from your writing. Cheers!|
LikeLike
Arianne said
This is very interesting, You are a very skilled blogger. I have joined your feed and look forward to seeking more of your excellent post. Also, I’ve shared your site in my social networks!|
LikeLike
Jared said
Interesting blog! Is your theme custom made or did you download it from somewhere? A design like yours with a few simple adjustements would really make my blog stand out. Please let me know where you got your theme. Bless you|
LikeLike
Nickolas said
If some one wants expert view regarding running a blog afterward i propose him/her to pay a visit this webpage, Keep up the fastidious work.|
LikeLike
Youlanda said
If some one needs to be updated with most recent technologies after that he must be pay a quick visit this web site and be up to date everyday.|
LikeLike
Grant said
I’ve been browsing on-line more than 3 hours these days, yet I by no means discovered any interesting article like yours. It is beautiful worth enough for me. Personally, if all website owners and bloggers made just right content as you did, the web shall be much more useful than ever before.|
LikeLike
Julio said
hello!,I really like your writing very so much! proportion we be in contact more about your article on AOL? I need an expert on this house to solve my problem. May be that’s you! Looking ahead to peer you. |
LikeLike
Stacey said
I delight in, result in I discovered just what I used to be looking for. You have ended my four day long hunt! God Bless you man. Have a great day. Bye|
LikeLike
Merissa said
Nice blog right here! Additionally your website loads up very fast! What host are you the usage of? Can I get your associate link to your host? I wish my website loaded up as fast as yours lol|
LikeLike
Omer said
We’re a group of volunteers and opening a new scheme in our community. Your site provided us with valuable info to work on. You’ve done a formidable job and our whole community will be grateful to you.|
LikeLike
Dan said
Appreciate the recommendation. Let me try it out.|
LikeLike
Ulrike said
I feel this is one of the so much significant info for me. And i’m happy studying your article. However wanna remark on few basic issues, The site style is wonderful, the articles is actually excellent : D. Excellent task, cheers|
LikeLike
Grover said
Link exchange is nothing else except it is just placing the other person’s weblog link on your page at appropriate place and other person will also do same in favor of you.|
LikeLike
Tasia said
You are so awesome! I don’t believe I’ve read something like that before. So great to discover somebody with some genuine thoughts on this topic. Really.. many thanks for starting this up. This site is one thing that’s needed on the internet, someone with some originality!|
LikeLike
Adela said
Heya i am for the primary time here. I found this board and I to find It really helpful & it helped me out a lot. I am hoping to provide one thing again and aid others like you helped me.|
LikeLike
Nelly said
Very soon this web site will be famous amid all blog people, due to it’s good articles|
LikeLike
Carmelia said
Definitely believe that which you stated. Your favorite justification seemed to be on the web the simplest thing to be aware of. I say to you, I definitely get irked while people think about worries that they just do not know about. You managed to hit the nail upon the top and defined out the whole thing without having side-effects , people could take a signal. Will likely be back to get more. Thanks|
LikeLike
baby clothes said
Еveryone loves what you guys are usuaⅼly up too. Suϲh clever work and reporting!
Keep up the great works guys I’ve іncluԀed yоu
guys to my blοgroll.
LikeLike