"All oracle passwords are encrypted" is not a true statement. Failed login
attempts, are retried by sending the password in an unencrypted format.
Atleast, until 8.1.7. To avoid which, ORA_ENCRYPT_LOGIN variable and
DBLINK_ENCRYPT_LOGIN parameter (for retried attempts across database link)
should be set to TRUE.

I could stand corrected though.

Raj




                                                                                       
                               
                    Sony kristanto                                                     
                               
                    <Sony@polyfinca        To:     Multiple recipients of list 
ORACLE-L <[EMAIL PROTECTED]>        
                    nggih.com>             cc:                                         
                               
                    Sent by:               Subject:     RE: encrypted user/passwd 
connection                          
                    [EMAIL PROTECTED]                                                    
                               
                    m                                                                  
                               
                                                                                       
                               
                                                                                       
                               
                    January 07,                                                        
                               
                    2003 01:53 AM                                                      
                               
                    Please respond                                                     
                               
                    to ORACLE-L                                                        
                               
                                                                                       
                               
                                                                                       
                               




You're right Jared, all oracle password is encrypted. Btw Andrey if it is
possible how to do it ?

> -----Original Message-----
> From:         Jared Still [SMTP:[EMAIL PROTECTED]]
> Sent:         Tuesday, January 07, 2003 11:04 AM
> To:           Multiple recipients of list ORACLE-L
> Subject:           Re: encrypted user/passwd connection
>
>
> Andre,
>
> Oracle does not send passwords across the network
> in clear text, they are encrypted by default.
>
> Jared
>
> On Monday 06 January 2003 05:43, Andrey Bronfin wrote:
> > Dear list !
> > I have just been asked the following question:
> > is it possible to make a connection from an Oracle client to an Oracle
> > instance (both are 8.1.7) in an "encrypted" way.
> > I.e. if someone is sitting with a sniffer between the server and the
> > client, then i don't want him to be able to see the user/passwd i'm
> > connecting with. Again , i am NOT asking how store the data in the DB
in
> an
> > "encrypted" way, but how to connect to an instance without showing my
> > passwd.
> > Thanks a lot!
> > Andrey.


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to