The tag has no usage guidance.

learn more… | top users | synonyms

2
votes
1answer
75 views

ORA-01017: invalid username/password;logon denied

There were other similar questions asked, but none that were able to tell me why I can't connect using a C# .NET web site I've stood up. While I know this forum is more for DBAs connecting to ...
-1
votes
1answer
26 views

SA password not working for .\SQLAdmin

Had some issues with jobs not working. To verify it was a security issue, changed the SQL Agent to run under DOMAIN\Administrator. Answered my question about the security issue. Went to change the ...
3
votes
1answer
70 views

Changing SQL account password in specific database

I am trying to change the password for userId in a specific database called LionsDB. If I am changing the password manually, I would login into SQL Management Studio using that user account and update ...
1
vote
1answer
16 views

MySQL: with CREATE_USER_PRIV, GETTING “Access denied” when attempting to change another user's password

In MySQL 5.6.27, user 'bmcrae' has create user privileges and is able to create a new user. However, when trying to change another user's password: SQL: SET PASSWORD FOR 'newuser' = PASSWORD('******...
0
votes
0answers
14 views

What is the best practice of storing mysql connection details to use in ruby/python scripts

I have ruby and python scripts that connect to mysql DBs. They are controlled in github and can populate to different servers. They run in a schedule way (not adhoc). What is the best practice of ...
0
votes
1answer
45 views

Sql service account password change for environment on Availability groups 2012

My current environment is on Availability groups sql 2012 with 1 Synchronous and 1 Asynchronous replica. Soon we need to change the sql service account passwords. Can any one suggest to me do I need ...
0
votes
0answers
24 views

MySQL on Windows: unable to use config_editor

I am a MySQL rookie and I need to backup all databases. I was thinking of using mysqldump.exe. It warns that using a password on the command line is insecure. Found the config editor and set this up: ...
4
votes
2answers
347 views

MS SQL Server, ask password before drop specific DB

I've got 2 databases which are very important for our organization. I would like to prevent an accidental drop/delete of them... Do you have any suggestion? I was thinking about asking a password ...
3
votes
2answers
89 views

Handle expired SQL login's passwords in SQL Server

Is it possible to change the password for a login with an expired password using SQL Server Management Objects (SMO) programming? Many times during working hours I got this message from a production ...
-2
votes
1answer
76 views

Password protected Database Engine with Server features and stored procedure [closed]

I like MS Access password protect feature but it does not useful for server based software like as SQLite which has password protect but not useful for server. SQL Server is one of the best DB engine ...
0
votes
0answers
10 views

MySQL - Remote Connections - In what format are credentials sent across the internet

Situation I have 3 MySQL servers on 3 machines. Sometimes they have to interact with each other which requires a remote connection from one machine to the other, usually via a PHP PDO connection. ...
0
votes
1answer
131 views

Is it possible to know the remaining 'expiration of sql login password date' & ‘maximum password age’ through T-SQL

I would like to say that today incident whatever i have faced related to Microosft SQL Server 2012. I had logged in Microsoft SQL Server 2012 at starting working hour of office time ,but at the mid of ...
2
votes
0answers
36 views

SQL Server not checking for expired passwords

We are using SQL Server 2005 on Windows Server 2008 with Windows Authentication where access is granted to members of a specific domain group. Clients are VB6/ADO applications that connect via an ...
1
vote
1answer
151 views

How to password protect a field in access?

I'm looking to password protect a field in my database containing confidential customer information. Is there a reasonable way of doing this in a timely manner? Thanks
0
votes
1answer
234 views

Alter user - is password stored in audit trails

I was asked an interesting question the other day and I have not been able to find a definitive answer. If one of my DBA's changes a password, will the password the password show up in plain text in ...
1
vote
0answers
47 views

Elasticsearch For Login Purpose

Is it secure to index users' credentials, such as passwords (hashed) and usernames, in ElasticSearch for login purpose? //Practical Issues
1
vote
2answers
107 views

Oracle: Can a user log in without a password?

I'm writing a sqplus-like program. I assume the connect string contains the password if it contains a slash, e.g. scott/tiger or scott/tiger@orcl. if connect string does not contain "/": prompt ...
3
votes
2answers
884 views

Password generator function

What's the best way of creating a password generator user defined function function in SQL Server if it is not possible to use non deterministic funtions within functions? I would like to create a ...
3
votes
2answers
81 views

How do I connect to mysql without having to type an empty password?

I just installed MySQL, and by default the root user has no password. If I connect with this command: mysql --port=3307 --host=127.0.0.1 -uroot -p It asks me to enter a password, I just hit return, ...
0
votes
1answer
563 views

How to change password of user in physical standby database Oracle 11g?

Hi I am new to Oracle 11g, I have a physical standby database and a primary database of Oracle 11g on two different servers. I have changed the passwords of users(schemas)like sys, sysman, system, ...
0
votes
0answers
38 views

hashed password retrieval in mysql

here I am again with the next question! I hash a password as follows: mysalt=os.urandom(12).encode('hex') passhash =mysalt + pw hash =str( pbkdf2_sha256.encrypt(passhash)) How can I verify this ...
2
votes
3answers
385 views

Query to find users with passwords same as their username in Oracle

I'm writing an Oracle audit script where I need to find users in a database who have set their passwords to be the same as their username, e.g. dbaadmin/dbaadmin. The query would need to get the list ...
11
votes
1answer
2k views

Does sys.sql_logins.is_policy_checked mean that the policy has been checked?

When I look in sys.sql_logins, I see a column called is_policy_checked. Can I trust that my password policy has been checked for all of the logins where this column value is 1?
8
votes
2answers
2k views

Why are mysql password hashes internally saved with a star (asterisk)?

I was reading upon some mysql internals, when going through the mysql.user table in the my mysql shell, I get mysql> select * from mysql.user limit 1 \G *************************** 1. row *********...
0
votes
1answer
590 views

Passing passwords more securely to mysql utilities on the command line

This question is related to another question I subsequently asked here: Using the output from mysqldiff.exe to transform database2 to match database1. I have been trying to use mysqldiff.exe, part of ...
6
votes
3answers
4k views

Verifying password policy on existing users

I've recently come into an environment where a lot of databases logins do not have the enforce_password_policy flag enabled. An upcoming audit is necessitating the verification of these logins' ...
1
vote
1answer
227 views

Proper way to store a password within a SQL Server agent job

I know this is a stupid idea, but I'm having a hard time finding a better solution right now. I need to execute several sql stored procedures on a daily basis, then execute a powershell script to ...
0
votes
0answers
56 views

A PostgreSQL user with SUPERUSER and all permissions to particular database can't read a specific column [closed]

I am trying to edit a website. I created a user for myself and granted all permissions and set up that user as SUPERUSER, using the user postgres. I still can't read a specific column (which is ...
2
votes
0answers
373 views

MySQL workbench won't import my sql file

I have an SQL file im trying to import via mysqlworkbench but I keep getting the error: Access denied for user 'wordpressuser79'@'localhost' (using password: NO) Operation failed with exitcode 1 ...
0
votes
2answers
53 views

How can user determine which hash their password uses?

Is there a query that a MySQL user that does not have admin rights can run to determine if they are using the old (pre-4.1) hash or the new (4.1-and-later) hash? This user was explicitly granted ...
3
votes
2answers
118 views

How can I switch to sa account from guest session in SQL server 2012?

I have a situation where I can log into my server as guest, and see that there is no password on the sa account. However when I try to login as sa with null password over the network it is rejected. ...
2
votes
1answer
89 views

changing postgres passwords without plaintext passwords in logs

I do not have access to a Postgres installation, so I cannot check. I am a security guy, and I'm seeing plaintext passwords in the logs: create user user1 with password 'PLAINTEXT PASSWORD' How ...
1
vote
0answers
165 views

When does SQL Server follow the Minimum Password Age policy?

According to this SQL Server 2008 whitepaper, SQL Server should only pay attention to the Minimum Password Age policy when the Check_Expiration (Enforce Password Expiration) option is turned on. Page ...
-1
votes
1answer
830 views

SQL Server credentials - Maximum Password size

What's the maximum password size I can get on SQL Server 2012/2014? I was unable to find this information online. I mean SQL Server credentials itself, not passwords inside tables. Thanks a lot
0
votes
2answers
41 views

can i secure sql server agent job with password

I want to secure SQL Server Agent jobs with password or any other method is it possible?
1
vote
0answers
1k views

Postgres user without password

I'm creating unit tests on a python application that uses digital certs on the server. Since I am not testing the connection between the server and the database, I need to setup the temporary test ...
4
votes
3answers
2k views

How can I make MySQL client read password from mylogin.cnf?

I'm trying to make the mysql client connect to a mysql server without requiring the password to be given interactively. Steps taken: 1) First create a mylogin.cnf file $ mysql_config_editor set --...
0
votes
1answer
427 views

how are passwords encoded in pg_shadow

How are passwords encoded in column passwd of pg_shadow? Doing a: select passwd from pg_shadow; I see values like the following: md52c92c858aa1fa12144f1dcbd4ca9c3a0 ... which, doesn't seem to ...
0
votes
2answers
244 views

Oracle remote OS authentication, security risks with domain users

What security risks can be with domain users? create user "OPS$KA\USERNAME" identified externally. grant create session to "OPS$KA\MARIK"; Then MARIK that is in KA domain, can logon to the ...
1
vote
0answers
168 views

Reset password for 'postgres' on v9.3 (Win Srv)

I'm trying to reset the password of the user 'postgres' on a postgres 9.3 installation, but have been unable to do so... I've tried every combination in pg_hba.conf I could find online (ex. 'host all ...
0
votes
0answers
4k views

Login failed for user 'x'. Reason: Could not find a login matching the name provided

I get this error Login failed for user '****'. Reason: Could not find a login matching the name provided. [CLIENT: 10.4.3.5] Right around 3 AM ish but the application connecting to sql server ...
0
votes
1answer
2k views

Bypassing Password Verify Function

I am considering making a recommendation to enforce a password verify function that will not allow users to change their own passwords. My understanding of the PASSWORD_VERIFY_FUNCTION in Oracle is ...
2
votes
0answers
1k views

Why OEM RMAN backup jobs fail after changing the preferred credentials?

In an Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production, Running on Oracle Linux 6.5, we configured full RMAN backup schedule using OEM (Oracle Enterprise Manager 11g ...
1
vote
1answer
3k views

Authentification failure for PostgreSQL server (9.3)

I can currently not connect to my Postgresql server (9.3) from pgadmin (Running on Ubuntu 14.04). The server according to pg_lsclusters is on port 5433. Ver Cluster Port Status Owner Data ...
1
vote
0answers
61 views

Why does Oracle trim passwords? [closed]

While looking over the settings of an application, I saw a 'typo' in the password for the database connection - it was like password='secret ', but the connection worked fine anyway. I tried the same ...
1
vote
1answer
525 views

Postgresql: When using SSH tunnel, I receive the fe_sendauth: no password supplied error

I am SSH Tunneling to my postgreql server. I have previously successfully configured 9 + win XP dev PCs to connect to this postgresql server, those PCs still connect successfully. I am now setting up ...
12
votes
1answer
2k views

Why would you use a managed service account rather than a virtual account in SQL Server 2012?

In SQL Server 2012, service accounts are created as virtual accounts (VAs), as described here, as opposed to managed service accounts (MSAs). The important differences I can see for these, based on ...
0
votes
1answer
2k views

Oracle case insensitive passwords seemingly ignoring SEC_CASE_SENSITIVE_LOGON

I'm trying to change the SYS password of an Oracle 11g database to be case-insensitive for legacy application reasons. My research suggests all I need to do is set the SEC_CASE_SENSITIVE_LOGON flag, ...
3
votes
1answer
2k views

Forgot mysql owner/root username and password

Recently, I changed my mysql root user to someother username (say kevin). But, now both the accounts don't login with the old password. It says access denied. I'm also not sure if the username is ...
1
vote
3answers
141 views

Reset of root password not working?

Our previous DBA left and didn't note the root password down, and I've been pressganged into doing part of his job until we can hire someone. So I create a file : /root/mysql.password Inside that ...