RE: Password Changes
Thanks Mike. Jared "Hand, Michael T" To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> Subject: RE: Password Changes Sent by: [EMAIL PROTECTED] om 12/07/01 12:25 PM Please respond to ORACLE-L Jared, All, The challenge has been accepted. In this episode of "This Old Password" we search for the lost password with the help of sql_trace and a new test profile. And voila, we discover the SYS table user_history$. The moral of the story is that if the aforementioned user is assigned a profile where Password_Reuse_Time or Password_Reuse_Max is not Unlimited (the default), then old passwords will be stored in user_history$.password until they are no longer required to enforce the profile constraints. If the user is not assigned this type of profile you are out of luck. And, of course, you would have to disable the profile to reset the password to an already-been-used value. You never know what you'll start with some questions ;-) Have a great weekend. Mike -Original Message- Sent: Friday, December 07, 2001 12:20 PM To: Multiple recipients of list ORACLE-L Mike, Good point, I obviously was out to lunch on that one. Your mission, should you choose to accept it, is to search out and disseminate the knowledge regarding this old password. Should you choose not to accept this mission, I will disavow all knowledge of this email and claim it was spoofed by persons unknown. This message will not self destruct in 5 seconds, but will probably hang around in various archives for centuries, consuming valuable resources. Now where'd that coffee go to... Jared -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Hand, Michael T INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Password Changes
Jared, All, The challenge has been accepted. In this episode of "This Old Password" we search for the lost password with the help of sql_trace and a new test profile. And voila, we discover the SYS table user_history$. The moral of the story is that if the aforementioned user is assigned a profile where Password_Reuse_Time or Password_Reuse_Max is not Unlimited (the default), then old passwords will be stored in user_history$.password until they are no longer required to enforce the profile constraints. If the user is not assigned this type of profile you are out of luck. And, of course, you would have to disable the profile to reset the password to an already-been-used value. You never know what you'll start with some questions ;-) Have a great weekend. Mike -Original Message- Sent: Friday, December 07, 2001 12:20 PM To: Multiple recipients of list ORACLE-L Mike, Good point, I obviously was out to lunch on that one. Your mission, should you choose to accept it, is to search out and disseminate the knowledge regarding this old password. Should you choose not to accept this mission, I will disavow all knowledge of this email and claim it was spoofed by persons unknown. This message will not self destruct in 5 seconds, but will probably hang around in various archives for centuries, consuming valuable resources. Now where'd that coffee go to... Jared -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Hand, Michael T INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Password Changes
Sounds like you had better fess up and ask the user what it is ;-)
If you know ahead of time that this is what you want to do, there is an old
trick to change it and then change it back to the original when done. I just
tried it on 8.1.7 and it still works:
col password old_value pw10
select password from dba_users where username = upper('&1');
alter user &1 identified by temp1;
Open another sqlplus sessions and logon using temp1 as the password. When
you're done, change it back to the original password from the original
session:
alter user &1 identified by values '&pw10';
Mike
>From: [EMAIL PROTECTED]
>Reply-To: [EMAIL PROTECTED]
>To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
>Subject: Re: Password Changes
>Date: Thu, 06 Dec 2001 16:36:59 -0800
>
>
>
>It can be seen in dba_users. The table is sys.user$.
>
>Once you've changed it, the old value is gone for good.
>
>Jared
>
>
>
>
>
>
> "Burton, Laura
> L." To: Multiple recipients of
>list ORACLE-L <[EMAIL PROTECTED]>
> plus.com>Subject: Password Changes
> Sent by:
> [EMAIL PROTECTED]
> om
>
>
> 12/06/01 10:29
> AM
> Please respond
> to ORACLE-L
>
>
>
>
>
>
>When you alter a user's password, what table does it update?
>
>
>I need to 'restore' a password for a user back to what it was before I
>changed it, but do not know what it was.
>
>
>Any ideas?? Can this be done?
>
>
>Thanks,
>Laura
>
>
>
>
>
>
>
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>--
>Author:
> INET: [EMAIL PROTECTED]
>
>Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051
>San Diego, California-- Public Internet access / Mailing Lists
>
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).
_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Mike Killough
INET: [EMAIL PROTECTED]
Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051
San Diego, California-- Public Internet access / Mailing Lists
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
RE: Password Changes
If you have an old full export of the database, you can find in the
beginning of the file the users definitions
like: Create user identified by values ''
Search for the user you're interested in and get the encrypted password
''
and run this command:
Alter user identified by values '' ;
Regards,
Waleed
-Original Message-
Sent: Thursday, December 06, 2001 7:37 PM
To: Multiple recipients of list ORACLE-L
It can be seen in dba_users. The table is sys.user$.
Once you've changed it, the old value is gone for good.
Jared
"Burton, Laura
L." To: Multiple recipients of list
ORACLE-L <[EMAIL PROTECTED]>
Subject: Password Changes
Sent by:
[EMAIL PROTECTED]
om
12/06/01 10:29
AM
Please respond
to ORACLE-L
When you alter a user's password, what table does it update?
I need to 'restore' a password for a user back to what it was before I
changed it, but do not know what it was.
Any ideas?? Can this be done?
Thanks,
Laura
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051
San Diego, California-- Public Internet access / Mailing Lists
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Khedr, Waleed
INET: [EMAIL PROTECTED]
Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051
San Diego, California-- Public Internet access / Mailing Lists
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
RE: Password Changes
Mike, Good point, I obviously was out to lunch on that one. Your mission, should you choose to accept it, is to search out and disseminate the knowledge regarding this old password. Should you choose not to accept this mission, I will disavow all knowledge of this email and claim it was spoofed by persons unknown. This message will not self destruct in 5 seconds, but will probably hang around in various archives for centuries, consuming valuable resources. Now where'd that coffee go to... Jared "Hand, Michael T" To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> Subject: RE: Password Changes Sent by: [EMAIL PROTECTED] om 12/07/01 07:25 AM Please respond to ORACLE-L Jared, I may be out to lunch (and I haven't create too many users lately) but I though later versions of Oracle could be set to prevent repeating a password over time (and/or length, randomness restrictions). If this is the case, wouldn't the old password have to be kept somewhere? Mike -Original Message- Sent: Thursday, December 06, 2001 7:37 PM To: Multiple recipients of list ORACLE-L It can be seen in dba_users. The table is sys.user$. Once you've changed it, the old value is gone for good. Jared -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Hand, Michael T INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Password Changes
Jared, I may be out to lunch (and I haven't create too many users lately) but I though later versions of Oracle could be set to prevent repeating a password over time (and/or length, randomness restrictions). If this is the case, wouldn't the old password have to be kept somewhere? Mike -Original Message- Sent: Thursday, December 06, 2001 7:37 PM To: Multiple recipients of list ORACLE-L It can be seen in dba_users. The table is sys.user$. Once you've changed it, the old value is gone for good. Jared -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Hand, Michael T INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Password Changes
It can be seen in dba_users. The table is sys.user$. Once you've changed it, the old value is gone for good. Jared "Burton, Laura L." To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> Subject: Password Changes Sent by: [EMAIL PROTECTED] om 12/06/01 10:29 AM Please respond to ORACLE-L When you alter a user's password, what table does it update? I need to 'restore' a password for a user back to what it was before I changed it, but do not know what it was. Any ideas?? Can this be done? Thanks, Laura -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Password Changes
Title: Password Changes sys.dba_users-password is the field. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Burton, Laura L.Sent: Thursday, December 06, 2001 12:29 PMTo: Multiple recipients of list ORACLE-LSubject: Password Changes When you alter a user's password, what table does it update? I need to 'restore' a password for a user back to what it was before I changed it, but do not know what it was. Any ideas?? Can this be done? Thanks, Laura
Re: Password Changes
user$ is updated and why not just reset it to the known value, only if you happen to have the "encrypted" password, then you could set it back using alter user identified by values 'ENCRYPTED PASSWORD HERE'; otherwise you're outta luck. joe Burton, Laura L. wrote: > When you alter a user's password, what table does it update? > > I need to 'restore' a password for a user back to what it was before I > changed it, but do not know what it was. > > Any ideas?? Can this be done? > > Thanks, > Laura > -- Joe Testa, Oracle DBA Want to have a good time with a bunch of geeks? Check out: http://www.geekcruises.com/standard_interface/future_cruises.html I'm presenting, when registering drop my name :) -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Joe Testa INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Password Changes
Title: Password Changes When you alter a user's password, what table does it update? I need to 'restore' a password for a user back to what it was before I changed it, but do not know what it was. Any ideas?? Can this be done? Thanks, Laura
