Tag Info

New answers tagged

0

@MrdDenny solution worked for me. I had to go to SQL Server Configuration Manager to enable TCP which solved the problem right away. I am not entire use if adding alias server is necessary though. I did add it but I did not use it in an query.


0

As I was stuck in not seeing "User-Level Security Wizard", I made my way to access it by including this item to the custom ribbon tab: After that I was able to continue and create users for the DB.


0

Here you can find how to generate the password hash. (This algorithm worked both on version 11.2 and 12.1 when I tried with some simple examples.) The next challenge is - as already mentioned -, to try all possible combinations of lowercase and uppercase letters in a password, if you want to cover everything. This will not be a single query, but some PL/SQL ...


1

I don't think this is possible for current versions of Oracle. What I understand happens is that Oracle generates an instance-specific salt and adds this to the passwords being hashed using the SHA1 algorithm, the result of which is stored as the hashed password. See for example http://marcel.vandewaters.nl/oracle/security/password-hashes for information ...


1

What if user has login "SCOTT" and password "ScoTt"? Do you still need to find this one? I think what you really need is to set password_verify_function in users profile. See http://docs.oracle.com/cd/E25054_01/network.1111/e16543/authentication.htm#i1007341 for more info.


1

Firebird has had GRANT and REVOKE since its initial version. See the Interbase 6.0 Language Reference, available from http://www.firebirdsql.org/en/reference-manuals/ (near the end of the page). Eg for GRANT: GRANT <privileges> ON [TABLE] {tablename | viewname} TO {<object> | <userlist> | GROUP UNIX_group} | EXECUTE ON PROCEDURE ...


3

Not only is it a best practice, it's mandatory to any major compliance requirements such as PCI V2 & V3, SOX, and almost any auditor will ask about it. Yes, having them on the same network is asking for major problem. Page 5 of the PCI DSS V2: For example, there must be a clear segmentation of functions and segregation of networks with different ...


1

I have to say yes. By blocking dev/test you are making sure that application changes are not accidentally updating production data. In many cases sensitive data on dev/test is scrubbed after restore and by blocking you are making certain that no one with access to test can access sensitive data in production. If you are using SQL Server with MSDN licensens ...


1

First let's answer your initial question then your follow up question. I would go further and: change the SQL Server port to a non standard one, turning off the SQL browser service, renaming SA, turning on the firewall on the local machine not to accept any connections on the SQL Server port outside of your internal IPs, and have all of your traffic hit ...


0

You can use any of the two methods below to connect to SQL Servers in a remote domain and continue using Windows Authentication. 1) runas /netonly 2) Through credential manager You can achieve this as explained here


0

You will have to setup a linked server forwarding the user credentials between the instances. There are step by step instructions here: It boils down to running this on DB_INSTANCE1\DB1 EXEC sp_addlinkedserver @server=N' DB_INSTANCE2', @srvproduct=N'', @provider=N'SQLNCLI', @datasrc=N' DB_INSTANCE2\DB2'; sp_addlinkedsrvlogin @rmtsrvname = ...


0

First of all you need to make sure you are auditing both successful and failed logins EXEC xp_instance_regwrite N'HKEY_LOCAL_MACHINE', N'Software\Microsoft\MSSQLServer\MSSQLServer', N'AuditLevel', REG_DWORD, 1 after a restart you can read the information from the SQL Server errorlog $server = get-item SQLSERVER:\sql\localhost\default ...


0

I'm not sure of the answer about the sp_helprolemember, but when I'm looking into user permissions, I use the query below. It's very much a work in progress and I'm always tweaking something about it. Designed for SQL2012. /**************** Name: User Analysis Mk2 Author: Jonathan Fite Date: 1/23/2015 Purpose: To display the individually set ...


0

The query below will show you all of the users who have permissions on the server but do not have explicit permissions on the databases. SELECT P.name , D1.name AS DatabaseName_1 , D2.name AS DatabaseName_2 FROM sys.server_principals P LEFT OUTER JOIN <Database1>.sys.database_principals D1 ON D1.[SID] = P.[SID] LEFT OUTER ...


16

No. While the documentation currently has the following arguably ambiguous statement about what this flag means: Password policy is checked. What it really means, and should say, is that the flag serves two purposes: The password policy might have been checked, but only if (a) the password policy was enabled at the time the password was last ...


3

If you only need to track database access, maybe collecting schema stability locks with extended events is enough. I blogged this idea last week for a totally different reason (tracking unused objects) but the script can be adapted to fit your needs. You can find it here. Basically, it reads an extended events session using the streaming api and then ...



Top 50 recent answers are included