Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [password]

The tag has no usage guidance.

1
vote
2answers
192 views

MariaDB 10.0.25 installs without configuration

While trying to install MariaDB on Ubuntu 15.10, I issue command $ sudo apt-get install mariadb-server and it outputs Reading package lists... Done Building dependency tree Reading state ...
15
votes
1answer
7k views

Does sys.sql_logins.is_policy_checked mean that the policy has been checked?

When I look in sys.sql_logins, I see a column called is_policy_checked. Can I trust that my password policy has been checked for all of the logins where this column value is 1?
0
votes
1answer
65 views

can't update user password on Mongodb 4.0.5 (Use of SCRAM-SHA-256 requires undigested passwords)

I'm trying to update a password from a user, using changeUserPassword(), and I just receive the following message: Error: Updating user failed: Use of SCRAM-SHA-256 requires undigested passwords &...
2
votes
1answer
50 views

Log report 'bad password', but still grants access

Original symptom: User sa locked out, too many bad attempts. Problem was sudden (no issues before), and pervasive (couple of fails in one day). As this was a new roll out of SQL backend to Sage300, ...
2
votes
2answers
71 views

Change user password on slave

Our users can only access the slave database. How can I let them change their passwords on their own or when their passwords expire?
0
votes
1answer
147 views

Cannot change MySQL root password

I have run the following commands found here. shell> mysql mysql> FLUSH PRIVILEGES; mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'MyNewPass' But when I go to login as root, I can type ...
2
votes
1answer
625 views

Passwordless mysqldump via shell script in /etc/cron.daily

I'm aware that there are dozens of questions similar to this, but it seems none has a definitive answer to my problem, so that's why I'm posting this... I hope in the right place. The problem: I ...
1
vote
2answers
100 views

Default phpMyAdmin Login Credentials

I downloaded and installed phpMyAdmin 4.8.5 on my windows. Upon opening it in the browser, it immediately asks for a Username and Password. I tried to submit root for username while leaving the ...
10
votes
7answers
13k views

How can I make MySQL client read password from mylogin.cnf?

I'm trying to make the mysql client connect to a mysql server without requiring the password to be given interactively. Steps taken: 1) First create a mylogin.cnf file $ mysql_config_editor set --...
3
votes
4answers
9k views

MYSQL - Unable to change 'old_passwords' variable

I have full access to a 'MYSQL 5.0.27-community-nt-log' database one of our new updates for a core app requires PHP 5.4, after installing and configuring I'm stuck at the error regarding old vs. new ...
11
votes
3answers
16k views

Verifying password policy on existing users

I've recently come into an environment where a lot of databases logins do not have the enforce_password_policy flag enabled. An upcoming audit is necessitating the verification of these logins' ...
5
votes
2answers
17k views

ORA-01017: invalid username/password;logon denied

There were other similar questions asked, but none that were able to tell me why I can't connect using a C# .NET web site I've stood up. While I know this forum is more for DBAs connecting to ...
0
votes
1answer
104 views

How to know or recover my pg_dump password? [closed]

I would like to backup my Postgre db using pg_dump. However, the first question asked by the prompt is the password. But I have no idea what it is. Indeed, it is different from my admin account ...
0
votes
0answers
15 views

Decrypt RSSD maint password in Replication Server version 15.7.1

Is anyone knows any possibilities to decrypt an encrypted RSSD maint password in the Replication Server configuration file? Thanks in advance.
0
votes
2answers
588 views

Retrieve user password in Oracle [closed]

How to obtain the password of a specified user in Oracle? What query to use to obtain that?
0
votes
0answers
8 views

Password-free access in ApsaraDB for Memcache

As ApsaraDB for Memcache already support password-free access in Alibaba Cloud instance. I enabled password-free access function and whitelist 0.0.0.0/0 IP segment but it does not take effect. I ...
1
vote
1answer
133 views

How to verify if given user@host with 'password' exists in MySQL 8.0+?

I write sanity check script for an application. One of the tests is supposed to verify that a given user@host with 'password' exists in MySQL. I'm using simple native hash passwords. In MySQL5.7- ...
1
vote
1answer
298 views

Problems with connecting to a remote Oracle 12c database

tl;dr RMAN failing to connect to standby database with correct credentials. RMAN-04006: error from auxiliary database: ORA-01017: invalid username/password; logon denied Password file is correct, ...
1
vote
0answers
43 views

Case sensitive logon on some users

Looking for a way to let selected users have case-sensitive logon check on Oracle 12.1. Setting SEC_CASE_SENSITIVE_LOGON = TRUE enables all users to have case sensitive logon, but trying to limit that ...
1
vote
1answer
259 views

Can the new “SCRAM-SHA-256” password authentication mechanism in Postgres 10 and later work with any JDBC drivers?

Postgres 10 added support for a new password authentication mechanism, Salted Challenge Response Authentication Mechanism (SCRAM-SHA-256, see RFC 7677). Discussed by Michael Paquier. ➥ Can this ...
1
vote
1answer
309 views

Is it overkill to encrypt an already hashed BCrypt password?

I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...
2
votes
1answer
116 views

Storing sensitive information in a SQL Server project

I am very new with encryption in SQL Server so I am stumbling over things that require prior experience. I have done my googling, but I need reassurance so here we go: Scenario I have a SQL Server ...
3
votes
1answer
200 views

Change expired user password on sql server from linux

I have got a colleague (software developer) working on Linux only. He connects to our SQL Server using a sql login with password. Occasionally the password expires and he has to choose a new one. Up ...
0
votes
1answer
45 views

ISO 27001 - resetting passwords for SQL Server accounts

We are implementing security changes in order to pass an ISO 27001 audit. We are in the process of setting all domain accounts (user accounts, admin accounts, service accounts) to have their passwords ...
8
votes
2answers
7k views

Why are mysql password hashes internally saved with a star (asterisk)?

I was reading upon some mysql internals, when going through the mysql.user table in the my mysql shell, I get mysql> select * from mysql.user limit 1 \G *************************** 1. row *********...
2
votes
1answer
63 views

Secure MySQL-Server completely (disable ability to reset root-password)

is there a way to secure a mysql-server so no one can reset a password via --init-file-startup? there should only be a: "root" user (password not known to anyone else than person a) "system" user (...
8
votes
2answers
2k views

How do I hide sensitive information like plaintext passwords from the logs?

I do not have access to a Postgres installation, so I cannot check. I am a security guy, and I'm seeing plaintext passwords in the logs: create user user1 with password 'PLAINTEXT PASSWORD' How can ...
2
votes
3answers
585 views

Reset of root password not working?

Our previous DBA left and didn't note the root password down, and I've been pressganged into doing part of his job until we can hire someone. So I create a file : /root/mysql.password Inside that ...
0
votes
1answer
53 views

Why is random password generation the same when it's inside while loop? TSQL

I have a random password generator. It works fine by itself. When I put it inside of a while loop, I get the same password even though the seed appears to be different. declare @count int = 0 ...
1
vote
0answers
109 views

Resetting MySQL Workbench 6.3 CE password

I'm a rookie using MySql Workbench 6.3 CE on Windows 10. Before I could even try to open my first data table to begin learning SQL, I've managed to forget my password. Can someone help me re-set it ...
0
votes
1answer
62 views

MySql global variable disconnect_on_expired_password

This is very annoying.... disconnect_on_expired_password is set to ON. MySql version is: Server: Localhost via UNIX socket Server type: MySQL Server version: 5.7.5-m15 - MySQL Community Server (GPL) ...
3
votes
1answer
2k views

psql, I try to connect to a database and I get “psql: FATAL: Peer authentication failed for user ”, why?

I'm using psql (9.2.23) on my Dell Latitude 3540 laptop running Linux CentOS 7. I want to do a simple thing: create a database username and log in as that username. My operating system username is "...
3
votes
1answer
2k views

AWS RDS Postgres pg_hba.conf auth-method

I'm starting to use Amazon Web Service's Relational Database Server product (AWS RDS) and want to confirm I have not made a security blunder. My configuration: Postgres Publicly accessible Inbound ...
1
vote
1answer
508 views

“sudo -u postgres psql postgres” does not ask for password

I've taken over a system using postgres. When logging in, if I use ... sudo -u postgres psql postgres ...it does NOT ask for a password. However, if I do ... psql -U postgres -h localhost postgres ...
3
votes
2answers
7k views

What is the max length of oracle user passwords?

I'm using the Oracle Verify Function 12c - the max password length seem to be < 30 charcters. Can I change that?
0
votes
1answer
1k views

MySQL passwords SHA512 using AES_ENCRYPT instead of ENCRYPT?

A tutorial is asking me to encrypt passwords using SHA512 in the following manner: INSERT INTO `vir_users` (`id`, `domain_id`, `password` , `email`) VALUES ('1', '1', ENCRYPT('pw1', CONCAT('$6$', ...
0
votes
2answers
2k views

Deploying and running SSIS packages to SQL Server with protection level EncryptSensitiveWithPassword

I have an SSIS package that connects to both a SQL Server instance and a MySQL instance so it can feed data from the SQL Server to the MySQL instance. When I deployed this package to the SQL Server ...
1
vote
2answers
9k views

Bypassing Password Verify Function

I am considering making a recommendation to enforce a password verify function that will not allow users to change their own passwords. My understanding of the PASSWORD_VERIFY_FUNCTION in Oracle is ...
2
votes
1answer
2k views

psql is not prompting me for a password, then denies access

I'm using Postgres 9.4 on Debian Linux. I created a database with a user, cindex with access to the database. Yet when I try and login at the command line, I'm not even prompted for a password: ...
1
vote
1answer
155 views

MariaDB multiple auth modules for a user?

MariaDB has pluggable authentication, like PostgreSQL. Unlike PostgreSQL, I can't figure out how to support two forms of auth for a user. For instance, in PostgreSQL we can have the following in our ...
1
vote
1answer
662 views

Can not reset MariaDB password “can't connect to local MySQL server through socket”

When I go mysqld_safe --skip-grant-tables & This message is outputted. 170802 14:14:15 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql When I try to run mariadb, I get $...
14
votes
1answer
4k views

Why would you use a managed service account rather than a virtual account in SQL Server 2012?

In SQL Server 2012, service accounts are created as virtual accounts (VAs), as described here, as opposed to managed service accounts (MSAs). The important differences I can see for these, based on ...
4
votes
1answer
2k views

Changing Service Account password in SQL Server - Clarification

We have the SQL Server Service and SQL Server Credential using same AD Level service Account. Because of recent security changes we need to change the Service account password at AD Level. At this ...
7
votes
1answer
670 views

Is there any way to prevent a PostgreSQL user to change his/her own password?

I'm administering a PotsgreSQL server and recently I realized that my "nonsuperuser" users have the possibility to change the secure passwords that I assign them for insecure ones. I searched in the ...
0
votes
1answer
9k views

Oracle 12 set user password Expiration date or EXPIRED(Grace)

Is it possible to set a future expiration date on a user account in Oracle? Or to set a account status to EXPIRE(GRACE) We want to implement a more strict password policy, and I've created the new ...
1
vote
0answers
537 views

SQL Server opendatasource reading a password protected Excel file

I would like to read a password protected Excel workbook and I'm not sure what the syntax is to enter this parameter. I found only passwords for the connection, which is not needed due to login. I ...
1
vote
1answer
509 views

Is password complexity policy linked to Active Directory in SQL Server

We have a change in policy in the organisation and a password complexity policy will be applied to active directory. I know when Enforce password complexity is checked on a SQL Server login it gets it ...
6
votes
1answer
8k views

How to lock a sql login after N unsuccessful login attempts

Consider I have login called sql_login. Can I lock sql_login login after 5 unsuccessful login attempts. When we create a login we can see there is option called password policy check the image. But ...
0
votes
1answer
2k views

Cannot change password from Oracle EM

I am facing an issue as follows: I login to em using SYS as SYSDBA. Enterprise Manager shows information screen saying my password is going to expire. SYS Password will expire on 7th Feb 2017 as ...
0
votes
1answer
87 views

Merge Replication: Service Account Password Change

Is it possible to change the password of a SQL Server service account that is used for not only on the publisher server but the 6 subscriber servers as well without seriously affecting merge ...