Reg; Password Encryption Problem

All posts relating to Oracle database administration.

Moderator: Tim...

Reg; Password Encryption Problem

Postby me_lucky » Mon Dec 17, 2012 6:39 am

Hi Tim,

We are facing issue with password encryption when we are migrating to 10g to 11g Database.

We use Oracle table to store application user password in database with "DBMS_OBFUSCATION_TOOLKIT.MD5" encryption function.
We have imported the database from Oracle 10g(10.2.0.3) to Oracle 11g(11.2.0.3.0), after the succesful import when we are trying to access our applicationit says invalid password. All we have to do is resetting the password to access the application.

I request you to expalin us , is this the default behaviour of Oracle or we can avoid this by using any other way.

Thanks in Advance,
Lucky
me_lucky
Senior Member
 
Posts: 170
Joined: Tue Jun 02, 2009 11:40 am

Re: Reg; Password Encryption Problem

Postby Tim... » Mon Dec 17, 2012 5:36 pm

Hi.

MD5 is not for encryption. It is a hashing function. Hashing is not encryption because unlike encryption, a hash can not be reversed (decrypted). There is no guarantee that hash data will be portable. There is always a possibility that Oracle will alter the algorithm or the "salt", making the value non-deterministic between versions.

You basically have to do what you've already suggested and reset the values.

Cheers

Tim...
Tim...
Oracle ACE Director
Oracle ACE of the Year 2006 - Oracle Magazine Editors Choice Awards
OakTable Member
OCP DBA 7.3, 8, 8i, 9i, 10g, 11g
OCP Advanced PL/SQL Developer
Oracle Database: SQL Certified Expert
My website: http://www.oracle-base.com
My blog: http://www.oracle-base.com/blog
Tim...
Site Admin
 
Posts: 17970
Joined: Mon Nov 01, 2004 5:56 pm
Location: England, UK

Re: Reg; Password Encryption Problem

Postby me_lucky » Tue Dec 18, 2012 9:17 am

Hi Tim,

Thanks alot for the answer.

Can i request you to provide the alternative for MD5 to encrypt the password?

Thanks & Regards,
Lucky.
me_lucky
Senior Member
 
Posts: 170
Joined: Tue Jun 02, 2009 11:40 am

Re: Reg; Password Encryption Problem

Postby Tim... » Tue Dec 18, 2012 2:39 pm

Hi.

There is nothing wrong with MD5. You just have to be aware of potential issues. I guess I would probably do more or less what you've done. I wrote this many years ago:

http://www.oracle-base.com/articles/9i/ ... ase-9i.php

Cheers

Tim...
Tim...
Oracle ACE Director
Oracle ACE of the Year 2006 - Oracle Magazine Editors Choice Awards
OakTable Member
OCP DBA 7.3, 8, 8i, 9i, 10g, 11g
OCP Advanced PL/SQL Developer
Oracle Database: SQL Certified Expert
My website: http://www.oracle-base.com
My blog: http://www.oracle-base.com/blog
Tim...
Site Admin
 
Posts: 17970
Joined: Mon Nov 01, 2004 5:56 pm
Location: England, UK

Re: Reg; Password Encryption Problem

Postby me_lucky » Thu Dec 20, 2012 10:18 am

Hi Tim,

Thanks again for the quick info.

Thanks & Regards,
Lucky
me_lucky
Senior Member
 
Posts: 170
Joined: Tue Jun 02, 2009 11:40 am

Re: Reg; Password Encryption Problem

Postby Tim... » Thu Dec 20, 2012 2:13 pm

:)
Tim...
Oracle ACE Director
Oracle ACE of the Year 2006 - Oracle Magazine Editors Choice Awards
OakTable Member
OCP DBA 7.3, 8, 8i, 9i, 10g, 11g
OCP Advanced PL/SQL Developer
Oracle Database: SQL Certified Expert
My website: http://www.oracle-base.com
My blog: http://www.oracle-base.com/blog
Tim...
Site Admin
 
Posts: 17970
Joined: Mon Nov 01, 2004 5:56 pm
Location: England, UK


Return to Oracle Database Administration

Who is online

Users browsing this forum: No registered users and 2 guests