Questions tagged [password]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
19 votes
9 answers
28k views

How can I make MySQL client read password from mylogin.cnf?

I'm trying to make the mysql client connect to a mysql server without requiring the password to be given interactively. Steps taken: 1) First create a mylogin.cnf file $ mysql_config_editor set --...
Lefteris Koutsoloukas's user avatar
19 votes
5 answers
46k views

In PostgreSQL URL I can't use a password containing special characters

I have a postgresql database in Azure The passwd string has special characters like these: )mvd99/iyH_=ag=Por/W}%%aKY^ygt+,sC7%%P?APOU psql --dbname=postgresql://db_user@mydemoserver:)mvd99/iyH_=ag=...
Sanx's user avatar
  • 191
17 votes
1 answer
15k views

Does sys.sql_logins.is_policy_checked mean that the policy has been checked?

When I look in sys.sql_logins, I see a column called is_policy_checked. Can I trust that my password policy has been checked for all of the logins where this column value is 1?
Aaron Bertrand's user avatar
15 votes
1 answer
6k views

Why would you use a managed service account rather than a virtual account in SQL Server 2012?

In SQL Server 2012, service accounts are created as virtual accounts (VAs), as described here, as opposed to managed service accounts (MSAs). The important differences I can see for these, based on ...
jordanpg's user avatar
  • 355
13 votes
2 answers
7k views

How do I hide sensitive information like plaintext passwords from the logs?

I do not have access to a Postgres installation, so I cannot check. I am a security guy, and I'm seeing plaintext passwords in the logs: create user user1 with password 'PLAINTEXT PASSWORD' How can ...
schroeder's user avatar
  • 232
12 votes
2 answers
55k views

How to get a user's password in PostgreSQL?

I am logged into my database as superuser postgres. postgres=# SELECT * FROM pg_user; +----------+----------+-------------+----------+---------+--------------+----------+----------+-----------+ | ...
showkey's user avatar
  • 334
11 votes
3 answers
32k views

Verifying password policy on existing users

I've recently come into an environment where a lot of databases logins do not have the enforce_password_policy flag enabled. An upcoming audit is necessitating the verification of these logins' ...
Reaces's user avatar
  • 2,601
10 votes
2 answers
10k views

Why are mysql password hashes internally saved with a star (asterisk)?

I was reading upon some mysql internals, when going through the mysql.user table in the my mysql shell, I get mysql> select * from mysql.user limit 1 \G *************************** 1. row *********...
Anshul Goyal's user avatar
10 votes
4 answers
188k views

SYSDBA password in Oracle DB

I am connecting to Oracle DB with: sqlplus / as sysdba What is the default password for the sysdba user? I tried in net and found out the default password is change_on_install but it is not working ...
user2065083's user avatar
7 votes
1 answer
28k views

How to lock a sql login after N unsuccessful login attempts

Consider I have login called sql_login. Can I lock sql_login login after 5 unsuccessful login attempts. When we create a login we can see there is option called password policy check the image. But ...
Pரதீப்'s user avatar
7 votes
1 answer
3k views

Is there any way to prevent a PostgreSQL user to change his/her own password?

I'm administering a PotsgreSQL server and recently I realized that my "nonsuperuser" users have the possibility to change the secure passwords that I assign them for insecure ones. I searched in the ...
ericgcc's user avatar
  • 73
7 votes
1 answer
19k views

How can I change the master password of pgAdmin 4 without resetting it?

pgAdmin 4 has a master password which is required to secure and later unlock the saved server passwords. This is applicable only for desktop mode users. I know my current master password, however, I ...
Glorfindel's user avatar
  • 2,201
6 votes
2 answers
11k views

psql is not prompting me for a password, then denies access

I'm using Postgres 9.4 on Debian Linux. I created a database with a user, cindex with access to the database. Yet when I try and login at the command line, I'm not even prompted for a password: ...
Dave's user avatar
  • 703
6 votes
1 answer
1k views

SQL Server - How does contained database user password expiration work?

I've recently started working with contained databases and I do not understand if/how contained database users have passwords that expire. MSDN documentation says they do - With a SQL Server login, ...
Will Southwood's user avatar
5 votes
2 answers
5k views

Password character issues for } and ' in SQL connection string

I am using ODBC Driver 17 to connect to MSSQL server. To avoid SQL injection possibilities, have enclosed password in {}. Now, am facing issue if I give a password like }qwerty1234. i.e. a password ...
Amal Jesudas's user avatar
5 votes
3 answers
10k views

Password generator function

What's the best way of creating a password generator user defined function function in SQL Server if it is not possible to use non deterministic funtions within functions? I would like to create a ...
JGA's user avatar
  • 778
5 votes
1 answer
2k views

Passwordless mysqldump via shell script in /etc/cron.daily

I'm aware that there are dozens of questions similar to this, but it seems none has a definitive answer to my problem, so that's why I'm posting this... I hope in the right place. The problem: I ...
Vila's user avatar
  • 223
5 votes
2 answers
31k views

ORA-01017: invalid username/password;logon denied

There were other similar questions asked, but none that were able to tell me why I can't connect using a C# .NET web site I've stood up. While I know this forum is more for DBAs connecting to ...
vapcguy's user avatar
  • 153
4 votes
2 answers
420 views

MS SQL Server, ask password before drop specific DB

I've got 2 databases which are very important for our organization. I would like to prevent an accidental drop/delete of them... Do you have any suggestion? I was thinking about asking a password ...
ufo's user avatar
  • 153
4 votes
2 answers
8k views

Handle expired SQL login's passwords in SQL Server

Is it possible to change the password for a login with an expired password using SQL Server Management Objects (SMO) programming? Many times during working hours I got this message from a production ...
Md Haidar Ali Khan's user avatar
4 votes
2 answers
3k views

Why shouldn't a pre-hashed password be used with CREATE LOGIN all the time?

(For the purpose of this question, assume that I only need to support SQL Server 2008 and higher. Or to future-proof this question, let's say recent, current, and near-future versions.) The ...
Jon Seigel's user avatar
  • 16.9k
4 votes
1 answer
7k views

Changing Service Account password in SQL Server - Clarification

We have the SQL Server Service and SQL Server Credential using same AD Level service Account. Because of recent security changes we need to change the Service account password at AD Level. At this ...
Learning_Learning's user avatar
4 votes
1 answer
909 views

Change expired user password on sql server from linux

I have got a colleague (software developer) working on Linux only. He connects to our SQL Server using a sql login with password. Occasionally the password expires and he has to choose a new one. Up ...
Martin Guth's user avatar
3 votes
2 answers
14k views

What is the max length of oracle user passwords?

I'm using the Oracle Verify Function 12c - the max password length seem to be < 30 charcters. Can I change that?
r0tt's user avatar
  • 1,008
3 votes
2 answers
1k views

How can I switch to sa account from guest session in SQL server 2012?

I have a situation where I can log into my server as guest, and see that there is no password on the sa account. However when I try to login as sa with null password over the network it is rejected. ...
bettysmith's user avatar
3 votes
1 answer
179 views

In which form Microsoft SQL password should be given when creating a user?

I am creating a Microsoft SQL server user with the guidance of this MSDN article and giving the system the following commands: CREATE LOGIN MyName WITH PASSWORD = 'MyPass'; USE My$DatabaseName; ...
mico's user avatar
  • 511
3 votes
2 answers
8k views

can't update user password on Mongodb 4.0.5 (Use of SCRAM-SHA-256 requires undigested passwords)

I'm trying to update a password from a user, using changeUserPassword(), and I just receive the following message: Error: Updating user failed: Use of SCRAM-SHA-256 requires undigested passwords &...
ivanleoncz's user avatar
3 votes
1 answer
5k views

Forgot mysql owner/root username and password

Recently, I changed my mysql root user to someother username (say kevin). But, now both the accounts don't login with the old password. It says access denied. I'm also not sure if the username is ...
kevin's user avatar
  • 141
3 votes
4 answers
13k views

MYSQL - Unable to change 'old_passwords' variable

I have full access to a 'MYSQL 5.0.27-community-nt-log' database one of our new updates for a core app requires PHP 5.4, after installing and configuring I'm stuck at the error regarding old vs. new ...
mhouston100's user avatar
3 votes
2 answers
6k views

psql, I try to connect to a database and I get "psql: FATAL: Peer authentication failed for user ", why?

I'm using psql (9.2.23) on my Dell Latitude 3540 laptop running Linux CentOS 7. I want to do a simple thing: create a database username and log in as that username. My operating system username is "...
DavideChicco.it's user avatar
3 votes
1 answer
12k views

How to recover a lost password in MySQL 5.7.11? (for Windows)

I am running MySQL 5.7.11 on Windows 10 I am unable to login to root through the command line client since I lost my password. How do I change/reset the old password? Please help, and thanks in ...
Shubham Deshmukh's user avatar
3 votes
1 answer
11k views

how are passwords encoded in pg_shadow

How are passwords encoded in column passwd of pg_shadow? Doing a: select passwd from pg_shadow; I see values like the following: md52c92c858aa1fa12144f1dcbd4ca9c3a0 ... which, doesn't seem to be ...
Marcus Junius Brutus's user avatar
3 votes
2 answers
388 views

Find accounts with passwords that are not complex

I can see all the SQL Login passwords that enforce the password policy with this command SELECT * FROM sys.sql_logins WHERE is_policy_checked = 1 However, it seems that when the enforce password ...
SE1986's user avatar
  • 1,960
3 votes
1 answer
21k views

AWS RDS Postgres pg_hba.conf auth-method

I'm starting to use Amazon Web Service's Relational Database Server product (AWS RDS) and want to confirm I have not made a security blunder. My configuration: Postgres Publicly accessible Inbound ...
Peter L's user avatar
  • 151
3 votes
2 answers
2k views

How do I connect to mysql without having to type an empty password?

I just installed MySQL, and by default the root user has no password. If I connect with this command: mysql --port=3307 --host=127.0.0.1 -uroot -p It asks me to enter a password, I just hit return, ...
Benubird's user avatar
  • 475
3 votes
1 answer
492 views

Error with restoring from a split .bak file with password

I am trying to restore a backup from a split .bak file[.bak_1/.bak_2/.bak_3]. The backup is password protected. So far this is what I have and I cannot seem to format in a way that does not throw me ...
YELDOB's user avatar
  • 33
3 votes
1 answer
488 views

Change mysql password interactively

Is it possible to change the user password in mysql in an interactive mode like it one can do in PostgreSQL for example using \password command? My goal is not to provide the new password together ...
Kaarel's user avatar
  • 133
3 votes
2 answers
9k views

DB2 to require password each time

I am using db2inst1 to connect to a database in DB2 which I have installed on my machine. Therefore, db2inst1 user does not require username/password authentication (borrows them from the OS). I would ...
John Pappas's user avatar
2 votes
1 answer
6k views

SQL Server credentials - Maximum Password size

What's the maximum password size I can get on SQL Server 2012/2014? I was unable to find this information online. I mean SQL Server credentials itself, not passwords inside tables. Thanks a lot
hugohilario's user avatar
2 votes
1 answer
3k views

Can't set root password after fresh installation of mariadb using ansible

Problem: After a fresh installation of mariadb 10.4 the root password could not be set using ansible. When installing mariadb from the debian packages by mariadb (not the official debian packages), ...
toydarian's user avatar
  • 201
2 votes
1 answer
14k views

ERROR 1045 (28000) & access denied for user 'root'@'localhost'

UBUNTU 22.04.1, mysql ver 8.0.30 (1) I get sudo apt install mysql-server then sudo mysql_secure_installation Get in loop this error for each complicated passwords I tried: (contained: '<>&(*...
mgae2m's user avatar
  • 161
2 votes
1 answer
455 views

Function accepts only certain passwords in postgreSQL

I have created a function in a postgreSQL(v10.10) database to create new users or update existing ones. As parameters you pass the username, password, role memberships, first name and last name. In my ...
pascatl's user avatar
  • 123
2 votes
4 answers
4k views

SQl Server Password Change after installation

I have installed SQL Server 2005, but at the time of installation I forgot to change my password. Now I can access my database only in Windows authentication mode, and I want to access the database in ...
user avatar
2 votes
1 answer
194 views

Log report 'bad password', but still grants access

Original symptom: User sa locked out, too many bad attempts. Problem was sudden (no issues before), and pervasive (couple of fails in one day). As this was a new roll out of SQL backend to Sage300, ...
Beekeeper's user avatar
2 votes
2 answers
12k views

New and old passwords on same MySQL database?

Is it possible to set up a user in MySQL 5.5 with a new password whilst keeping existing users with the old type of passwords? By old and new passwords I mean the style of hash. I was thinking I ...
Chris's user avatar
  • 23
2 votes
1 answer
2k views

What are the risks of changing oracle sys password?

I need to change some old databases SYS password because of security. I'm not DBA of these databases. I don't know if I will change SYS password what it will be happen. What are the risks of ...
onur's user avatar
  • 163
2 votes
1 answer
843 views

Password storage best practices

We have a system (.NET application + sql server) where in addition to regular user passwords we need to store passwords that are used by the application processes to access various other subsystems or ...
ArtW's user avatar
  • 21
2 votes
1 answer
13k views

Retrieve or reset the password for PostgreSQL on Linux

I have installed Postgres on my Linux system. I forgot the admin password I want to reset the password. How can I do that?
user avatar
2 votes
1 answer
580 views

Storing sensitive information in a SQL Server project

I am very new with encryption in SQL Server so I am stumbling over things that require prior experience. I have done my googling, but I need reassurance so here we go: Scenario I have a SQL Server ...
dyslexicanaboko's user avatar
2 votes
1 answer
755 views

MariaDB multiple auth modules for a user?

MariaDB has pluggable authentication, like PostgreSQL. Unlike PostgreSQL, I can't figure out how to support two forms of auth for a user. For instance, in PostgreSQL we can have the following in our ...
Evan Carroll's user avatar
  • 63.2k