Metal Gear Solid World

Check the password for Oracle 11g strong and sensible case

As an Oracle DBA, you've probably heard a lot about the new security in Oracle 11g as database vault, audit vault, the Auditor strong ASO, improved, etc, but with a busy schedule, what time to study all subjects in depth? They are all going to affect their day to day operations of DBA? What you need to know first? Course depending on the particular database that you administer, have their particular needs. But in general, which tends to affect most of you, almost never interesting new features. The reason is simple: if you do not use, does not affect you. This tends to affect is the change in existing features that could lead to compatibility or interoperability. When the script they have used for years suddenly stops working, you will be disappointed. When your boss or over calls to ask about what has passed, you may feel sick.

In this article we are discussing the password feature of new cases of sensitivity to 11G. Each session begins with identifying Oracle. If authentication fails at the beginning of your script, what follows is almost certain to be broken. So what has changed, why, and what you need to know?

Basic Check

Let me begin with an introduction to the Auditor password. As you probably know, for reasons of security, the Oracle user passwords are not stored in clear text. Instead, they are stored as an "auditor" means a value of one-way hash from the password in clear text. Hash auditor has some unique characteristics. One, which is "one way": It is easy to calculate the hash of the password in clear text, but it is almost impossible to find the word password in clear text from a hash. Two different plaintexts, almost never give the same hash value (called collision). These features allow Oracle Database to store the hash of the password of a user as a substitute for the password in clear text. When a user sets a logon password, Oracle calculates the hash of the password, and allows the user to open session if it matches the hash value that is stored in the database. To get an idea of what an auditor looks like Oracle, launch added to the Password column in user table in the schema SYS $ (Of course, you will need SYSDBA privileges to do so).
SELECT name, PASSWORD Order $ SYS.USER by name;

What has changed

Before 11G, passwords Oracle is case sensitive. "Foobar", "what" and "foobar" are identical in their use as a password Oracle. Give the same hash value. If a user can connect to password "foo", which could be connected with "foobar" as well. In 11G, however, when creating or modifying user accounts, default passwords are case-sensitive. 11G also introduces a salt "the hash value creation so users have even two passwords are identical, their auditors would still be different.

Oracle allows you to control the sensitivity password If support for setting the initialization parameter SEC_CASE_SENSITIVE_LOGON. Only users who have the ALTER SYSTEM privilege can set the parameter SEC_CASE_SENSITIVE_LOGON. Set to TRUE to allow the case or FALSE to disable case.

ALTER SYSTEM SEC_CASE_SENSITIVE_LOGON = | false true;

How affect the sensitivity Password files

As you recall, Oracle stores the password (again as auditors) for users with SYSDBA and SYSOPER privileges a password file on the server, instead of in the database. You can enable or disable password files using the argument of the utility ignorecase command line ORAPWD. Ignorecase default is N (no), which provides case-sensitive.

Here is an example of how to enable the case and the password users SYSDBA SYSOPER

orapwd orapw file entries = 100 n = ignorecase
SYS Enter password: password

This creates a file called orapwd password. From ignorecase is set to N (NO), the entry of the password for the password parameter is case sensitive. So, if you log in using the word password, get it (if the password is entered using the characters exactly as same with the case exactly the same building). If you enter the password, even if different, will fail
Yes, the DBA defines the system ignorecase Y, then the password in the password file are case-sensitive, which means you can enter the password with a capitalization you want.

It is important to note that, as the way it is controlled within an Oracle system, the password is case sensitive a normal user and SYSDBA / SYSOPER user can be independent.

How does the password import sensitivity and Improvement

What happens when exported to the users of a previous database, where the password is case-sensitive in the 11G? Passwords are case-sensitive in these accounts remain case-sensitive, even if the system breaks 11G lit the password. This is logical because otherwise older users can not connect from a script or a program of work and clients. However, this will change when the user change the password.

You can find users who have case sensitive or case passwords by querying the view DBA_USERS. The column on this topic PASSWORD_VERSIONS trial, the statement which has created the password. For example:

SELECT USERNAME, FROM PASSWORD_VERSIONS DBA_USERS;

PASSWORD_VERSIONS USERNAME
—————————— —————–
JONES 10G 11G
ADAMS 11G 10G
11G 10G CLARK
PRESTON 11G
BLAKE 10G

Passwords for the accounts of Jones, Adams and Clark have been created in version 10g, and then back in version 11g. Your passwords, assuming that the case has been activated, are upper sensitive, as is the password for Preston. However, Blake's story is still using the 10g standard output, is insensitive. Once he changes his password, is case-sensitive and safe.

Conclusion

words user passwords in Oracle Database 11g case become sensitive by default. Regular user and password if the sensitivity SYSDBA / SYSOPER user can be controlled independently. If you have a script a password, otherwise the script may stop working with 11G even though it works very well with previous versions. To learn more about this subject, see "Safety Guide" (Oracle Part Number B28531-03).

About the Author

Peter Dwyer is an internationally known System and Database Architect for Oracle environments. He is founding principal of The Certainty Group, a Boston-based Oracle database consultation company specializing in quickly assessing and correcting complex problems in multi-vendor, mission-critical systems that demand high performance and reliability.

A Clear Case

New For T-Mobile Nokia C7 Astound Clear Accessory Silicone Skin Soft Case Cover $5.95

New AT&T Samsung A817 Solstice 2 Clear Accessory Silicone Skin Soft Case Cover $6.35

T-Clear Phone Snap-on Hard Case Cover For BlackBerry 9800(Torch) 9810(Torch 4G) $7.99

New Verizon Samsung i400 Continuum Clear Accessory Silicone Skin Soft Case Cover $5.95

New Verizon Samsung i500 Fascinate Clear Accessory Silicone Skin Soft Case Cover $5.95

New For Samsung i510 Droid Charge Clear Accessory Silicone Skin Soft Case Cover $6.35

New Samsung Nexus S Galaxy 2 i9020 Clear Accessory Silicone Skin Soft Case Cover $5.95

New AT&T Samsung Focus i917 Phone Clear Accessory Silicone Skin Soft Case Cover $6.45

New AT&T Samsung i997 Infuse 4G Clear Accessory Silicone Skin Soft Case Cover $5.95

New Sprint Samsung M580 Replenish Clear Accessory Silicone Skin Soft Case Cover $6.35

Ball Mouth Plastic Storage Caps Ball Regular Mouth Plastic Storage Caps…

Snapware 6032 Large 2 Layer-Cupcake Keeper $18.97 Snapware 6032 Snap ‘N Stack Cookie and Cupcake Carrier The Snapware Snap âN Stack Cookie and Cupcake Keeper is perfect for bringing treats to a picnic or party. Durable handle is great for portability and internal trays are reversible for cupcakes or cookies and quarter sheet cakes. Snapware 6032 Snap ‘N Stack Cookie and Cupcake Carrier Features: Give your homemade goodies the protection they nee…

Progressive International Collapsible Cupcake and Cake Carrier $22.00 Easily transport your tasty treats to any party with the collapsible cupcake and cake carrier from Progressive. This ingeniously designed carrier allows you to transport 24 cupcakes, a ten inch round layer cake or a nine inch square layer cake. The carrier includes a two-tiered cupcake tray that is extra tall to accommodate large amounts of decorative frosting, and extra deep cupcake holes to prev…

PASSPORT PROTECTOR $1.50 PASSPORT PROTECTOR…

OfficeMax 25-Pack Standard CD Jewel Cases 0M96045 $9.99 Need to replace your cracked or missing jewel cases? Let OfficeMax help. Type: Case. Compatible Media Type: CD / DVD. Replace cracked or missing standard-size jewel cases. Durable, high-impact plastic construction. Each case holds 1 disk. Clear front w/ black insert. Protect your CDs and DVDs with high impact plastic…

Middle Cyclone [Vinyl] $24.98 It’s apt that this record opens with tense, trembling guitar tones: ominous beacons of the gale-force songs to come. Middle Cyclone finds Neko Case–she of the flaming hair and unforgettably tremendous voice–returning to the darkly romantic sound of 2006’s near-perfect Fox Confessor Brings the Flood, only this time the songs are even more fervid and more troubled. Take the title track…

Skque Clear Silicone Skin Case for Palm Treo 680 755 750 Series $4.96 Palm Treo Clear Silicon Case protects your Palm Treo 680 755 750 Series smartphone with this sleek and stylish black silicone case. The silicon / silicone skin is made to fit your Palm Treo 680 / 755 /750 perfectly and provides your smartphone with unmatched protection against minor drops, scratches, and dirt. All ports are accessible without removing the case from your Palm Treo 680 755 750. The …

Dewalt DPG82-11C Concealer Clear Anti-Fog Dual Mold Safety Goggle $8.50 …

Etymotic Research ER20 ETYPlug Hearing Protection Earplugs, Standard Clear Stem with Blue Tip (Clear) $10.99 Benefits Reduces sound levels evenly so that music and speech are clear and natural, not muffled as with other earplugs Reduces risk of hearing damage for many noisy occupations as well as noisy venues, such as airshows, parades, athletic events and motor sports Enhances the music experience for audiences while protecting hearing Lets musicians hear their own instrument and their blend with other…

Sterilite 16428012 Storage Box, White Lid with See-Through Base, 12-Pack, 6-Quart $17.99 This set of 12 Plastic Shoe Boxes from Sterilite are not only great for storing shoes, but also craft items, toys, and school supplies. The white lid with see through base allows you to easily view the contents inside the container. Contoured base creates handles for easy transportation. Safe space by stacking multiple boxes on top of each other….