Thanks Mike.

Jared



                                                                                       
                             
                    "Hand, Michael                                                     
                             
                    T"                   To:     Multiple recipients of list ORACLE-L 
<[EMAIL PROTECTED]>        
                    <HANDM@polaroi       cc:                                           
                             
                    d.com>               Subject:     RE: Password Changes             
                             
                    Sent by:                                                           
                             
                    [EMAIL PROTECTED]                                                     
                             
                    om                                                                 
                             
                                                                                       
                             
                                                                                       
                             
                    12/07/01 12:25                                                     
                             
                    PM                                                                 
                             
                    Please respond                                                     
                             
                    to ORACLE-L                                                        
                             
                                                                                       
                             
                                                                                       
                             




Jared, All,

The challenge has been accepted.

In this episode of "This Old Password" we search for the lost password with
the help of sql_trace and a new test profile.  And voila, we discover the
SYS table user_history$.  The moral of the story is that if the
aforementioned user is assigned a profile where Password_Reuse_Time or
Password_Reuse_Max is not Unlimited (the default), then old passwords will
be stored in user_history$.password until they are no longer required to
enforce the profile constraints.  If the user is not assigned this type of
profile you are out of luck.  And, of course, you would have to disable the
profile to reset the password to an already-been-used value.

You never know what you'll start with some questions ;-)  Have a great
weekend.

Mike

-----Original Message-----
Sent: Friday, December 07, 2001 12:20 PM
To: Multiple recipients of list ORACLE-L




Mike,

Good point, I obviously was out to lunch on that one.

Your mission, should you choose to accept it, is to search out
and disseminate the knowledge regarding this old password.

Should you choose not to accept this mission, I will disavow
all knowledge of this email and claim it was spoofed by
persons unknown.

This message will not self destruct in 5 seconds, but will
probably hang around in various archives for centuries,
consuming valuable resources.

Now where'd that coffee go to...

Jared
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Hand, Michael T
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to