Password Hash In Oracle 11g

Posted by sriram on June 7, 2011


Let `s discuss about The Changes Of  DBA_USERS Especially In PASSWORD Column In Oracle 11g and 10g.

DBA_USERS   Gives Us Information about all users of the database.

And it contains password hash value In its PASSWORD Column

ind>  col TABLE_NAME format a10
ind> col COLUMN_NAME format a10
ind> col COMMENTS format a25
ind>  select TABLE_NAME,COLUMN_NAME, COMMENTS
  2   from dict_columns
  3   where TABLE_NAME='DBA_USERS' and COLUMN_NAME='PASSWORD';

TABLE_NAME COLUMN_NAM COMMENTS
---------- ---------- -------------------------
DBA_USERS  PASSWORD   Encrypted password

1 row selected.

Yes..It contains the encrypted value Based On Concatenation of Username and Password
This Is How/why two Users with same password can have different Encrypted hash values.

ind> create user satya identified by satya;

User created.

ind>  create user kalyani identified by satya;

User created.

ind> select username,password
  2  from dba_users
  3  where USERNAME in ('KALYANI','SATYA');

USERNAME                       PASSWORD
------------------------------ ------------------------------
KALYANI                        E81F7CB996A56BA9
SATYA                          218ED5615AAE5F6B

2 rows selected.

ind> drop user satya;

User dropped.

ind> drop user satyab;
drop user satyab
          *
ERROR at line 1:
ORA-01918: user 'SATYAB' does not exist

ind> create user satya identified by backpain;

User created.

ind> create user satyab identified by ackpain;

User created.

ind> select username,password
  2  from dba_users
  3  where username like 'SATYA%';

USERNAME                       PASSWORD
------------------------------ ------------------------------
SATYA                          458070F68E74206E
SATYAB                         458070F68E74206E

2 rows selected.

Here You can Observe that User SATYA and SATYAB with same hash value,
as the Concatenation of USERNAME and PASSWORD are Same.

But In Oracle 11g Oracle Wont store any password hash values in DBA_USERS.PASSWORD column.As Per the Document

http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/statviews_5081.htm#REFRN23302

Password Column  is deprecated in favor of   the AUTHENTICATION_TYPE column

But You can get the password from “User$“.

SQL> create User a identified by "a";

User created.

SQL> create User b identified by "a";

User created.

SQL> select dbms_metadata.get_ddl('USER','A') from dual;

DBMS_METADATA.GET_DDL('USER','A')
--------------------------------------------------------------------------------

   CREATE USER "A" IDENTIFIED BY VALUES 'S:298EDEE1721E71B950D55CCB9ABA7EE5C596E
A6B0CCFF098E88889B98BD5;AFCC9478DFBF9029'
      DEFAULT TABLESPACE "USERS"
      TEMPORARY TABLESPACE "TEMP"

SQL> select dbms_metadata.get_ddl('USER','B') from dual;

DBMS_METADATA.GET_DDL('USER','B')
--------------------------------------------------------------------------------

   CREATE USER "B" IDENTIFIED BY VALUES 'S:25E85C1466288EE377681D131DF1920B33448
CD4108F8DDFC580A3315A39;9017AAA5BF2D9732'
      DEFAULT TABLESPACE "USERS"
      TEMPORARY TABLESPACE "TEMP"

SQL> select name, password, spare4 from sys.user$ where name ='A'
  2  ;

NAME                           PASSWORD
------------------------------ ------------------------------
SPARE4
--------------------------------------------------------------------------------
A                              AFCC9478DFBF9029
S:298EDEE1721E71B950D55CCB9ABA7EE5C596EA6B0CCFF098E88889B98BD5

SQL> select password,username from dba_users
  2  where length(username)=1;

PASSWORD                       USERNAME
------------------------------ ------------------------------
                               A
                               B

SQL>

You can Find My Post here at Orafaq.
http://www.orafaq.com/forum/mv/msg/171754/510127/136607/#msg_510127
For more reference
http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/statviews_5081.htm#REFRN23302
Hope You enjoyed It 🙂
Sriram

Advertisements

100 Responses to “Password Hash In Oracle 11g”

  1. Hi! I just would like to give you a huge thumbs up
    for your great information you have right here on this post.

    I will be returning to your blog for more soon.

  2. I read this post completely regarding the resemblance of most recent
    and previous technologies, it’s awesome article.

  3. You need to take part in a contest for one of the highest quality blogs online.
    I will recommend this blog!

  4. Having read this I believed it was very informative.
    I appreciate you finding the time and energy to put this content
    together. I once again find myself personally spending way too much time
    both reading and posting comments. But so what, it
    was still worth it!

  5. I was recommended this website by my cousin. I am not sure whether this post is written by him as
    no one else know such detailed about my difficulty. You’re incredible!
    Thanks!

  6. Hi, after reading this awesome article i am too happy to share my experience here with mates.

  7. hi!,I like your writing so much! percentage we keep up a correspondence more approximately your post
    on AOL? I require a specialist on this space to unravel my
    problem. May be that’s you! Looking forward to look you.

  8. This is the right webpage for anyone who wishes to understand this topic.
    You realize a whole lot its almost hard to argue with you (not that I actually will need to…HaHa).
    You definitely put a new spin on a topic that
    has been discussed for a long time. Great stuff,
    just great!

  9. My brother suggested I may like this blog. He used to be totally right.
    This post actually made my day. You cann’t imagine simply how so much
    time I had spent for this information! Thanks!

  10. I just like the valuable information you supply for your articles.
    I will bookmark your weblog and test again right here frequently.
    I’m relatively certain I will learn plenty of new stuff proper here!
    Best of luck for the next!

  11. Unquestionably believe that which you said. Your favorite reason appeared to be on the internet the simplest thing
    to be aware of. I say to you, I definitely get annoyed while people think about worries that they
    just do not know about. You managed to hit the nail upon the top as well as defined out the whole thing without having side effect
    , people could take a signal. Will probably be back to get more.

    Thanks

  12. Thank you for every other excellent post. The place
    else could anybody get that type of information in such an ideal way of writing?
    I’ve a presentation next week, and I am at the look for such info.

  13. Thanks for ones marvelous posting! I actually enjoyed reading it, you may
    be a great author.I will make sure to bookmark your blog and will
    come back from now on. I want to encourage that you continue your great posts, have
    a nice weekend!

  14. Excellent post. I was checking continuously this blog and I’m impressed!
    Very useful info specially the last part 🙂 I care for such information much.
    I was seeking this particular info for a long time. Thank you and good
    luck.

  15. Baby said

    We’re a group of volunteers and opening a new scheme in our community.
    Your web site offered us with valuable information to work
    on. You’ve done a formidable job and our entire community will be thankful to you.

  16. Your style is really unique in comparison to other people I have read stuff from.
    I appreciate you for posting when you have the
    opportunity, Guess I will just bookmark this web site.

  17. dazoveride said

    Hi, could you tell me if there’s a way to reverse the concatenation and subject the hash to brute force or dictionary attack using tool such as hashcat. The objective is to ensure no weak passwords are being used such as password123.
    Cheers
    D

  18. ӏ feel this іs among the such a lot signifіcant information for me.
    And i’m glad studying your artісle. ᗷut should statement on few basic issues, The
    web site taste iѕ wonderful, the articles is actuаlly ᥱxceⅼlent : D.
    Excеllent job, cheers

  19. I usеd to be able to find good advice from your blog posts.

  20. Wɦen someone writes an article he/ѕhe retains the plan of
    a uѕer in his/her mind that hoѡ a user can undeгstand it.

    So thɑt’s why this article is amazing. Thanks!

  21. I used tο be able to find gooԀ information from your blog posts.

  22. Hi therе! I just ԝould like to give you a big thumbs up for
    the excellent info you have got here on this post. I’ll be returning
    to your ᴡeb site for more soon.

  23. Hiya, I am really glad I’ve found this information. Nowadays bloggers publish only about gossips and net and this is actually irritating. A good website with interesting content, this is what I need. Thank you for keeping this site, I will be visiting it. Do you do newsletters? Can not find it.

  24. That is very interesting, You are an overly professional blogger. I have joined your feed and look forward to in the hunt for extra of your wonderful post. Additionally, I’ve shared your site in my social networks. why not try this out: http://tinyurl.com/jjq2yw8

  25. Hurrah, that’s what I was looking for, what a information! existing here at this blog, thanks admin of this website.

  26. Good job! Well written!

  27. Does уoսr blog have a contact pаge? I’m having problеms locating it but,
    I’d like to shoot you an email. I’ve ɡоt some іdeas for your blog you might be interested
    in hearing. Either way, great site and I look forward
    to seeing it improᴠe over time.

  28. beard club said

    I don’t like your template but your posts are quite great so I will check back! Also i can’t join to your rss feed! Any ideea why?

  29. “Great Blogpost! I couldn’t refrain from commenting. _Perfectly written!”

  30. Abram said

    I got this site from my pal who told me concerning this site and now this time I am visiting this website and reading very informative posts at this place.|

  31. Carri said

    Great post.|

  32. Gustavo said

    Have you ever thought about writing an ebook or guest authoring on other blogs? I have a blog based on the same information you discuss and would love to have you share some stories/information. I know my viewers would enjoy your work. If you’re even remotely interested, feel free to shoot me an e-mail.|

  33. Maggie said

    Hello there, just changed into aware of your weblog via Google, and found that it’s really informative. I’m going to be careful for brussels. I’ll appreciate should you proceed this in future. Numerous other folks might be benefited from your writing. Cheers!|

  34. Arianne said

    This is very interesting, You are a very skilled blogger. I have joined your feed and look forward to seeking more of your excellent post. Also, I’ve shared your site in my social networks!|

  35. Jared said

    Interesting blog! Is your theme custom made or did you download it from somewhere? A design like yours with a few simple adjustements would really make my blog stand out. Please let me know where you got your theme. Bless you|

  36. Nickolas said

    If some one wants expert view regarding running a blog afterward i propose him/her to pay a visit this webpage, Keep up the fastidious work.|

  37. Youlanda said

    If some one needs to be updated with most recent technologies after that he must be pay a quick visit this web site and be up to date everyday.|

  38. Grant said

    I’ve been browsing on-line more than 3 hours these days, yet I by no means discovered any interesting article like yours. It is beautiful worth enough for me. Personally, if all website owners and bloggers made just right content as you did, the web shall be much more useful than ever before.|

  39. Julio said

    hello!,I really like your writing very so much! proportion we be in contact more about your article on AOL? I need an expert on this house to solve my problem. May be that’s you! Looking ahead to peer you. |

  40. Stacey said

    I delight in, result in I discovered just what I used to be looking for. You have ended my four day long hunt! God Bless you man. Have a great day. Bye|

  41. Merissa said

    Nice blog right here! Additionally your website loads up very fast! What host are you the usage of? Can I get your associate link to your host? I wish my website loaded up as fast as yours lol|

  42. Omer said

    We’re a group of volunteers and opening a new scheme in our community. Your site provided us with valuable info to work on. You’ve done a formidable job and our whole community will be grateful to you.|

  43. Dan said

    Appreciate the recommendation. Let me try it out.|

  44. Ulrike said

    I feel this is one of the so much significant info for me. And i’m happy studying your article. However wanna remark on few basic issues, The site style is wonderful, the articles is actually excellent : D. Excellent task, cheers|

  45. Grover said

    Link exchange is nothing else except it is just placing the other person’s weblog link on your page at appropriate place and other person will also do same in favor of you.|

  46. Tasia said

    You are so awesome! I don’t believe I’ve read something like that before. So great to discover somebody with some genuine thoughts on this topic. Really.. many thanks for starting this up. This site is one thing that’s needed on the internet, someone with some originality!|

  47. Adela said

    Heya i am for the primary time here. I found this board and I to find It really helpful & it helped me out a lot. I am hoping to provide one thing again and aid others like you helped me.|

  48. Nelly said

    Very soon this web site will be famous amid all blog people, due to it’s good articles|

  49. Carmelia said

    Definitely believe that which you stated. Your favorite justification seemed to be on the web the simplest thing to be aware of. I say to you, I definitely get irked while people think about worries that they just do not know about. You managed to hit the nail upon the top and defined out the whole thing without having side-effects , people could take a signal. Will likely be back to get more. Thanks|

  50. Еveryone loves what you guys are usuaⅼly up too. Suϲh clever work and reporting!
    Keep up the great works guys I’ve іncluԀed yоu
    guys to my blοgroll.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
Puddintopia

The Ramblings and Ravings Of Author Jason A. Rust

So Many Oracle Manuals, So Little Time

“Books to the ceiling, Books to the sky, My pile of books is a mile high. How I love them! How I need them! I'll have a long beard by the time I read them”—Lobel, Arnold. Whiskers and Rhymes. William Morrow & Co, 1988.

flashdba

Oracle databases, storage and the high-performance world of flash memory

jarneil

The thoughts of Jason Arneil

Frits Hoogland Weblog

IT Technology; Oracle, linux, TCP/IP and other stuff I find interesting

OraStory

Dominic Brooks on Oracle Performance, Tuning, Data Quality & Sensible Design ... (Now with added Sets Appeal)

Martins Blog

Trying to explain complex things in simple terms

Carlos Sierra's Tools and Tips

Tools and Tips for Oracle Performance and SQL Tuning

Talip Hakan Ozturk's ORACLE BLOG

The secret of success is at your fingertips!...

Martin Widlake's Yet Another Oracle Blog

Oracle performance, Oracle statistics and VLDBs

Richard Foote's Oracle Blog

Focusing Specifically On Oracle Indexes, Database Administration and Some Great Music

Oracle Scratchpad

Just another Oracle weblog

Oracle DBA Blog

Procedures, learnings and fixes encountered by a Junior DBA

Oracle ACE Director Kai Yu's Oracle Blog

Share Oracle Tips and Tricks and Related News

Online Identity & Access Management

One Stop Shop for Identity & Access Management

Uwe Hesse

about Database Technology

Oracle database internals by Riyaj

Discussions about Oracle performance tuning, RAC, Oracle internal & E-business suite.

Support

WordPress.com Support

Kamran Agayev's Oracle Blog

Oracle Certified Master

%d bloggers like this: