The tag has no wiki summary.

learn more… | top users | synonyms

5
votes
2answers
735 views

Why are mysql password hashes internally saved with a star (asterisk)?

I was reading upon some mysql internals, when going through the mysql.user table in the my mysql shell, I get mysql> select * from mysql.user limit 1 \G *************************** 1. row ...
0
votes
2answers
36 views

Passing passwords more securely to mysql utilities on the command line

This question is related to another question I subsequently asked here: Using the output from mysqldiff.exe to transform database2 to match database1. I have been trying to use mysqldiff.exe, part of ...
4
votes
3answers
421 views

Verifying password policy on existing users

I've recently come into an environment where a lot of databases logins do not have the enforce_password_policy flag enabled. An upcoming audit is necessitating the verification of these logins' ...
1
vote
1answer
27 views

Proper way to store a password within a SQL Server agent job

I know this is a stupid idea, but I'm having a hard time finding a better solution right now. I need to execute several sql stored procedures on a daily basis, then execute a powershell script to ...
1
vote
0answers
7 views

MySQL workbench won't import my sql file

I have an SQL file im trying to import via mysqlworkbench but I keep getting the error: Access denied for user 'wordpressuser79'@'localhost' (using password: NO) Operation failed with exitcode 1 ...
0
votes
2answers
38 views

How can user determine which hash their password uses?

Is there a query that a MySQL user that does not have admin rights can run to determine if they are using the old (pre-4.1) hash or the new (4.1-and-later) hash? This user was explicitly granted ...
1
vote
1answer
57 views

How can I switch to sa account from guest session in 2012 sql server?

I have a situation where I can log into my server as guest, and see that there is no password on the sa account. However when I try to login as sa with null password over the network it is rejected. ...
1
vote
1answer
22 views

changing postgres passwords without plaintext passwords in logs

I do not have access to a Postgres installation, so I cannot check. I am a security guy, and I'm seeing plaintext passwords in the logs: create user user1 with password 'PLAINTEXT PASSWORD' How ...
1
vote
0answers
48 views

When does SQL Server follow the Minimum Password Age policy?

According to this SQL Server 2008 whitepaper, SQL Server should only pay attention to the Minimum Password Age policy when the Check_Expiration (Enforce Password Expiration) option is turned on. Page ...
-1
votes
1answer
45 views

SQL Server credentials - Maximum Password size

What's the maximum password size I can get on SQL Server 2012/2014? I was unable to find this information online. I mean SQL Server credentials itself, not passwords inside tables. Thanks a lot
0
votes
0answers
97 views

Postgres user without password

I'm creating unit tests on a python application that uses digital certs on the server. Since I am not testing the connection between the server and the database, I need to setup the temporary test ...
2
votes
3answers
215 views

How can I make MySQL client read password from mylogin.cnf?

I'm trying to make the mysql client connect to a mysql server without requiring the password to be given interactively. Steps taken: 1) First create a mylogin.cnf file $ mysql_config_editor set ...
0
votes
1answer
77 views

how are passwords encoded in pg_shadow

How are passwords encoded in column passwd of pg_shadow? Doing a: select passwd from pg_shadow; I see values like the following: md52c92c858aa1fa12144f1dcbd4ca9c3a0 ... which, doesn't seem to ...
0
votes
2answers
104 views

Oracle remote OS authentication, security risks with domain users

What security risks can be with domain users? create user "OPS$KA\USERNAME" identified externally. grant create session to "OPS$KA\MARIK"; Then MARIK that is in KA domain, can logon to the ...
0
votes
0answers
96 views

Reset password for 'postgres' on v9.3 (Win Srv)

I'm trying to reset the password of the user 'postgres' on a postgres 9.3 installation, but have been unable to do so... I've tried every combination in pg_hba.conf I could find online (ex. 'host all ...
0
votes
0answers
2k views

Login failed for user 'x'. Reason: Could not find a login matching the name provided

I get this error Login failed for user '****'. Reason: Could not find a login matching the name provided. [CLIENT: 10.4.3.5] Right around 3 AM ish but the application connecting to sql server ...
0
votes
1answer
890 views

Bypassing Password Verify Function

I am considering making a recommendation to enforce a password verify function that will not allow users to change their own passwords. My understanding of the PASSWORD_VERIFY_FUNCTION in Oracle is ...
2
votes
0answers
502 views

Why OEM RMAN backup jobs fail after changing the preferred credentials?

In an Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production, Running on Oracle Linux 6.5, we configured full RMAN backup schedule using OEM (Oracle Enterprise Manager 11g ...
1
vote
1answer
2k views

Authentification failure for PostgreSQL server (9.3)

I can currently not connect to my Postgresql server (9.3) from pgadmin (Running on Ubuntu 14.04). The server according to pg_lsclusters is on port 5433. Ver Cluster Port Status Owner Data ...
0
votes
0answers
29 views

Changing root and other passwords to 32bit has instead of OLD_PASSWORD?

My mysql server is not secured very well as asked here. Now it was recommended that I start using the NEW_PASSWORD (Default PASSWORD). As I am currently using OLD_PASSWORD = 1. However I have a ...
1
vote
0answers
52 views

Why does Oracle trim passwords? [closed]

While looking over the settings of an application, I saw a 'typo' in the password for the database connection - it was like password='secret ', but the connection worked fine anyway. I tried the same ...
1
vote
1answer
310 views

Postgresql: When using SSH tunnel, I receive the fe_sendauth: no password supplied error

I am SSH Tunneling to my postgreql server. I have previously successfully configured 9 + win XP dev PCs to connect to this postgresql server, those PCs still connect successfully. I am now setting up ...
10
votes
1answer
1k views

Why would you use a managed service account rather than a virtual account in SQL Server 2012?

In SQL Server 2012, service accounts are created as virtual accounts (VAs), as described here, as opposed to managed service accounts (MSAs). The important differences I can see for these, based on ...
0
votes
1answer
830 views

Oracle case insensitive passwords seemingly ignoring SEC_CASE_SENSITIVE_LOGON

I'm trying to change the SYS password of an Oracle 11g database to be case-insensitive for legacy application reasons. My research suggests all I need to do is set the SEC_CASE_SENSITIVE_LOGON flag, ...
2
votes
1answer
429 views

Forgot mysql owner/root username and password

Recently, I changed my mysql root user to someother username (say kevin). But, now both the accounts don't login with the old password. It says access denied. I'm also not sure if the username is ...
0
votes
2answers
98 views

Reset of root password not working?

Our previous DBA left and didn't note the root password down, and I've been pressganged into doing part of his job until we can hire someone. So I create a file : /root/mysql.password Inside that ...
0
votes
0answers
487 views

ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)

Im trying to to dump an old database system to migrate the data. # mysql --version mysql Ver 14.12 Distrib 5.0.32, for pc-linux-gnu (i486) using readline 5.2 The weird part is this: # mysql -u ...
4
votes
2answers
584 views

Why shouldn't a pre-hashed password be used with CREATE LOGIN all the time?

(For the purpose of this question, assume that I only need to support SQL Server 2008 and higher. Or to future-proof this question, let's say recent, current, and near-future versions.) The ...
3
votes
1answer
128 views

Error with restoring from a split .bak file with password

I am trying to restore a backup from a split .bak file[.bak_1/.bak_2/.bak_3]. The backup is password protected. So far this is what I have and I cannot seem to format in a way that does not throw me ...
1
vote
0answers
54 views

'sa' Password Managment [closed]

I have been asked about my ideas regarding how often to change sa passwords and how best to manage this process. Users who are sa by right of user role are managed by the general password policy of ...
2
votes
1answer
200 views

“Set Password” with a limited user

I'm using MySQL 5.6 and I want to have a limited service-user which is able to create/modify the users of my databases. Now my problem is that I can quite figure out what privileges my service-user ...
0
votes
2answers
253 views

how to access my password in SSIS 2005 by VB.NET

A VB.NET component delivered following message: Login failed for user MyDBUser It is about an OleDbConnection. btw The user works fine togehter with SQL Server Management Studio. Retaining a ...
1
vote
3answers
2k views

MYSQL - Unable to change 'old_passwords' variable

I have full access to a 'MYSQL 5.0.27-community-nt-log' database one of our new updates for a core app requires PHP 5.4, after installing and configuring I'm stuck at the error regarding old vs. new ...
1
vote
1answer
61 views

Change mysql password interactively

Is it possible to change the user password in mysql in an interactive mode like it one can do in PostgreSQL for example using \password command? My goal is not to provide the new password together ...
2
votes
1answer
419 views

Recover encrypted Oracle database

A client fired their DBA. He used OWM to add a wallet to their Oracle database and secure a few necessary columns of tables that they need. I can see the walled using: orapki wallet display -wallet ...
0
votes
2answers
881 views

Password encryption type

I would like to confirm if MySQL uses SHA1 for 'PASSSWORD' hashing and why test below doesn't work: mysql> GRANT USAGE ON *.* TO 'test'@'localhost' IDENTIFIED BY 'password'; Query OK, 0 rows ...
3
votes
2answers
4k views

DB2 to require password each time

I am using db2inst1 to connect to a database in DB2 which I have installed on my machine. Therefore, db2inst1 user does not require username/password authentication (borrows them from the OS). I would ...
3
votes
1answer
149 views

In which form Microsoft SQL password should be given when creating a user?

I am creating a Microsoft SQL server user with the guidance of this MSDN article and giving the system the following commands: CREATE LOGIN MyName WITH PASSWORD = 'MyPass'; USE My$DatabaseName; ...