Questions tagged [password]
The password tag has no usage guidance.
147
questions
0
votes
1
answer
732
views
MySQL Prompt Users to Reset Passwords during first login
I have this set of user accounts that I desire to create with default passwords then force the users to change passwords at first login. Plus, I wanted to force all user accounts to be resetting ...
0
votes
1
answer
2k
views
Set up a postgres database with a specific role without password prompt
Context
I have a PostgreSQL server (localhost:5432) which holds a database called my_database.
I have created long time ago, a simple role which owns this database; my_user, different from the ...
0
votes
1
answer
59
views
MySQL CLI asks for password but doesn't use it
I'm trying to connect to a remote MySQL database for replication.
The database is on a machine that's part of a secured network, so after opening the security enough to allow my replication ...
0
votes
0
answers
45
views
How do I store a password in such a way that I can obtain the plain-text password again?
Consider the following scenario:
My app is utilizing a third-party API which requires a username and password for authentication. Unlike most APIs, which have one username and password set for the ...
2
votes
1
answer
4k
views
MySQL passwords SHA512 using AES_ENCRYPT instead of ENCRYPT?
A tutorial is asking me to encrypt passwords using SHA512 in the following manner:
INSERT INTO `vir_users`
(`id`, `domain_id`, `password` , `email`)
VALUES
('1', '1', ENCRYPT('pw1', CONCAT('$6$', ...
12
votes
2
answers
52k
views
How to get a user's password in PostgreSQL?
I am logged into my database as superuser postgres.
postgres=# SELECT * FROM pg_user;
+----------+----------+-------------+----------+---------+--------------+----------+----------+-----------+
| ...
0
votes
2
answers
3k
views
Cannot change MySQL root password
I have run the following commands found here.
shell> mysql
mysql> FLUSH PRIVILEGES;
mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'MyNewPass'
But when I go to login as root, I can type ...
0
votes
1
answer
380
views
MySql global variable disconnect_on_expired_password
This is very annoying....
disconnect_on_expired_password is set to ON.
MySql version is:
Server: Localhost via UNIX socket
Server type: MySQL
Server version: 5.7.5-m15 - MySQL Community Server (GPL)
...
0
votes
1
answer
643
views
MySQL Plugin "mysql_old_password" not loaded
In an attempt to fix another issue I had, I ran the commands below (as per https://dev.mysql.com/doc/refman/5.6/en/old-client.html)
mysql> UPDATE mysql.user SET plugin = 'mysql_old_password'
mysql&...
0
votes
1
answer
56
views
Reset root password in MySQL
I am logging in with root user in MySQL, and the server has been hardened, so this parameter is set default-authentication-plugin=caching_sha2_password, and this is currently the only user I have.
...
0
votes
2
answers
601
views
Designating no password for account in MySQL config file
This is a theoretical question because having a DB account with no password is a terrible idea.
Question: Is there a way to designate an account with no password in the MySQL config file?
0
votes
2
answers
170
views
SYS password has expired and cannot be changed due to ORA-00257: Archiver error
In the past : When I had once the error ORA-00257: Archiver error, I had resolved it using the RMAN command:
rman target sys/1234
delete archivelog all;
This time , when I try to connect to rman ...
1
vote
1
answer
157
views
viewing the password of a connected SQL Server user
Using SSMS, the system had me change the password on the user I was using.
Changed it and thought knew what I was changing it to.
Have done a Save Password.
So I am able to get in via SSMS, but ...
19
votes
5
answers
45k
views
In PostgreSQL URL I can't use a password containing special characters
I have a postgresql database in Azure
The passwd string has special characters like these:
)mvd99/iyH_=ag=Por/W}%%aKY^ygt+,sC7%%P?APOU
psql --dbname=postgresql://db_user@mydemoserver:)mvd99/iyH_=ag=...
13
votes
2
answers
7k
views
How do I hide sensitive information like plaintext passwords from the logs?
I do not have access to a Postgres installation, so I cannot check.
I am a security guy, and I'm seeing plaintext passwords in the logs:
create user user1 with password 'PLAINTEXT PASSWORD'
How can ...
-1
votes
1
answer
465
views
Why does postgres allow me to access localhost without any password regardless of role?
I was under the impression that Postgres used some local socket magic to allow a local user to access postgres without password, whereas passing the host (-h) option would force it to use TCP and thus ...
10
votes
4
answers
187k
views
SYSDBA password in Oracle DB
I am connecting to Oracle DB with:
sqlplus / as sysdba
What is the default password for the sysdba user? I tried in net and found out the default password is change_on_install but it is not working ...
1
vote
0
answers
49
views
Issue with hash storage resulting from password_verify() output
Consider the following code:
$random_token = random_bytes(32);
$token_hash = password_hash(
$random_token,
PASSWORD_DEFAULT
);
$token_base64 = sodium_bin2base64(
$random_token,
...
0
votes
0
answers
33
views
Application Role - Reset Password using hash or Encryption form
I need to automate reset password of database application role. Password must be encrypted or hash form due to security reason.
I tried to convert password in hash form using 'Hashbytes' as mentioned ...
1
vote
1
answer
400
views
Reset password for 'postgres' on v9.3 (Win Srv)
I'm trying to reset the password of the user 'postgres' on a postgres 9.3 installation, but have been unable to do so...
I've tried every combination in pg_hba.conf I could find online (ex. 'host all ...
1
vote
1
answer
4k
views
How can make PG_DUMP work without asking password?
I have set pgpassword in .bashrc:
vim .bashrc
export PGPASSWORD=pass_for_postgresql
It is no need to type password for command psql -U postgres.
When i dump a table from db1 into db2 with :
pg_dump ...
5
votes
2
answers
5k
views
Password character issues for } and ' in SQL connection string
I am using ODBC Driver 17 to connect to MSSQL server.
To avoid SQL injection possibilities, have enclosed password in {}.
Now, am facing issue if I give a password like }qwerty1234.
i.e. a password ...
1
vote
1
answer
1k
views
Can't get MariaDB docker to work without password
I want to add MariaDB to my docker compose file, like this:
version: '3'
services:
mariadb:
image: 'mariadb:10.3'
ports:
- "3306:3306"
volumes:
...
1
vote
1
answer
605
views
Why has my root password changed after I updated MySQL from 5.7 to 8.0?
I have set my root account passwords like this:
mysql -u root
SET PASSWORD FOR 'root'@'localhost' = PASSWORD('pswd1');
SET PASSWORD FOR 'root'@'127.0.0.1' = PASSWORD('pswd2');
SET PASSWORD FOR 'root'@'...
1
vote
0
answers
212
views
Enter psql without password requirement for user postgres
I have set PGPASSWORD in my .bashrc:
export PGPASSWORD=mypass
Now i can enter into psql with :
psql -u postgres
Set nopasswd in /etc/sudoers
user ALL=NOPASSWD:/bin/su - postgres
Then i toggle to ...
1
vote
0
answers
271
views
Changing root and user passwords in MariaDB 10.5?
We have a few MariaDB servers (MariaDB 10.5, running on Debian 11/bullseye) where we need to change the passwords for the DB root user and for other user accounts in the DB system (by which I mean ...
2
votes
1
answer
14k
views
ERROR 1045 (28000) & access denied for user 'root'@'localhost'
UBUNTU 22.04.1, mysql ver 8.0.30
(1)
I get sudo apt install mysql-server then
sudo mysql_secure_installation
Get in loop this error for each complicated passwords I tried: (contained: '<>&(*...
7
votes
1
answer
19k
views
How can I change the master password of pgAdmin 4 without resetting it?
pgAdmin 4 has a master password which
is required to secure and later unlock the saved server passwords. This is applicable only for desktop mode users.
I know my current master password, however, I ...
2
votes
1
answer
179
views
dual-password-like feature for MySQL before v 8.0
tldr; Is there a dual-password-like feature for MySQL v.5.x ?
Problem
I have a MySQL server that needs to temporarily allow two passwords for one account, due to legal constraints that impose DBMS ...
2
votes
2
answers
600
views
Secure MySQL-Server completely (disable ability to reset root-password)
is there a way to secure a mysql-server so no one can reset a password via --init-file-startup?
there should only be a:
"root" user (password not known to anyone else than person a)
"system" user (...
2
votes
1
answer
828
views
Password storage best practices
We have a system (.NET application + sql server) where in addition to regular user passwords we need to store passwords that are used by the application processes to access various other subsystems or ...
2
votes
1
answer
1k
views
CREATE LOGIN "MUST_CHANGE" does not work for Azure
I want to create logins for users for my Azure SQL database.
Naturally I don't want to know the users' passwords so I want to set it up so that they HAVE to change their password on first login.
...
5
votes
2
answers
31k
views
ORA-01017: invalid username/password;logon denied
There were other similar questions asked, but none that were able to tell me why I can't connect using a C# .NET web site I've stood up. While I know this forum is more for DBAs connecting to ...
1
vote
1
answer
1k
views
MariaDB root password change using Ansible
I had tried to change MariaDB root password using following Ansible script.
- name: Dump MySQL root Password
debug:
msg: "MySQL new Password : {{ mysql_pass }}"
...
0
votes
1
answer
897
views
Why can't reset password for postgres?
I can login postgresql database without password :
sudo -u postgres psql
Now i want to reset password 'xxxxxxxx' for postgres:
sudo -u postgres psql
postgres=# ALTER USER postgres WITH PASSWORD '...
1
vote
1
answer
4k
views
What's wrong with my provided admin password for Oracle Apex instance administrator account?
I have installed Oracle Database 19c Enterprise Edition on Oracle Linux 7.8.I am now trying to install Apex 20.1 .
Got to the chapter "5.4.2.3 Running apxchpwd.sql" to set the instance ...
17
votes
1
answer
15k
views
Does sys.sql_logins.is_policy_checked mean that the policy has been checked?
When I look in sys.sql_logins, I see a column called is_policy_checked. Can I trust that my password policy has been checked for all of the logins where this column value is 1?
11
votes
3
answers
31k
views
Verifying password policy on existing users
I've recently come into an environment where a lot of databases logins do not have the enforce_password_policy flag enabled.
An upcoming audit is necessitating the verification of these logins' ...
3
votes
2
answers
8k
views
can't update user password on Mongodb 4.0.5 (Use of SCRAM-SHA-256 requires undigested passwords)
I'm trying to update a password from a user, using changeUserPassword(), and I just receive the following message:
Error: Updating user failed: Use of SCRAM-SHA-256 requires undigested passwords
&...
0
votes
1
answer
309
views
Oracle - Understanding Password Hash Versions
We ran into a problem, and so we're trying to understand all about the password versions. Here is what happened:
We upgraded from 11g to 12c. Our sqlnet.ora had this parameter: SQLNET....
-1
votes
1
answer
3k
views
How to migrate from MySQL 5.7 to 8.0 non-inplace
Hi I have a new Ubuntu 20.04 server, and an old 18.04 server which I am retiring. 18.04 runs MySQL 5.7 and 20.04 runs MySQL 8.0. In the old days, I'd simply do a mysqldump --all-databases and then ...
6
votes
2
answers
11k
views
psql is not prompting me for a password, then denies access
I'm using Postgres 9.4 on Debian Linux. I created a database with a user, cindex with access to the database. Yet when I try and login at the command line, I'm not even prompted for a password:
...
19
votes
9
answers
27k
views
How can I make MySQL client read password from mylogin.cnf?
I'm trying to make the mysql client connect to a mysql server without requiring the password to be given interactively.
Steps taken:
1) First create a mylogin.cnf file
$ mysql_config_editor set --...
0
votes
2
answers
225
views
ISO 27001 - resetting passwords for SQL Server accounts
We are implementing security changes in order to pass an ISO 27001 audit.
We are in the process of setting all domain accounts (user accounts, admin accounts, service accounts) to have their passwords ...
1
vote
2
answers
254
views
MariaDB 10.0.25 installs without configuration
While trying to install MariaDB on Ubuntu 15.10, I issue command
$ sudo apt-get install mariadb-server
and it outputs
Reading package lists... Done
Building dependency tree
Reading state ...
2
votes
1
answer
13k
views
Retrieve or reset the password for PostgreSQL on Linux
I have installed Postgres on my Linux system. I forgot the admin password I want to reset the password. How can I do that?
0
votes
3
answers
712
views
Supplying root password to MySQL V8 sort of fails
On Ubuntu 20.04 I have installed MySQL V8.0.25. But I kind of fail to apply a (valid) root password. The apt-get process for installing mysql-server did not ask for a root password.
And I cannot enter ...
-1
votes
1
answer
420
views
Fields for storing user passwords
What coulmn heads would you need, generally speaking, for storing user passwords in a database, and what would be their datatypes be (irrespective of specific hashing/encryption algorithm used)?
One ...
0
votes
1
answer
111
views
Can SSIS packages call other SSIS packages in the connection string?
I am running an SSIS package that transfers data from one (SQL2008) server to another (SQL2000). However after P2V conversion the SQL2008 server cannot execute an SSIS package due to a user ...
3
votes
1
answer
487
views
Change mysql password interactively
Is it possible to change the user password in mysql in an interactive mode like it one can do in PostgreSQL for example using \password command?
My goal is not to provide the new password together ...