Questions tagged [password]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
2answers
426 views

Cannot change MySQL root password

I have run the following commands found here. shell> mysql mysql> FLUSH PRIVILEGES; mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'MyNewPass' But when I go to login as root, I can type ...
0
votes
1answer
78 views

ISO 27001 - resetting passwords for SQL Server accounts

We are implementing security changes in order to pass an ISO 27001 audit. We are in the process of setting all domain accounts (user accounts, admin accounts, service accounts) to have their passwords ...
0
votes
1answer
155 views

MySql global variable disconnect_on_expired_password

This is very annoying.... disconnect_on_expired_password is set to ON. MySql version is: Server: Localhost via UNIX socket Server type: MySQL Server version: 5.7.5-m15 - MySQL Community Server (GPL) ...
0
votes
4answers
62 views

What privileges do I need to change the password of sys in an Oracle Database?

Our identity management tool wants to change the sys password regularly. It fails with the ORA-01031. What privileges or roles do I need to grant the identity management tool user to be able to change ...
1
vote
1answer
28 views

Why does CURRENT_USER() show the root@::1 when I login to MySQL?

I've set 3 different passwords for the following accounts: 'root'@'localhost', 'root'@'127.0.0.1' and 'root'@'::1'. By typing: mysql -u root -p I can only login with my 'root'@'::1' account password ...
1
vote
0answers
26 views

Why is the authentication_string different from the other one if the passwords are the same?

I've set the same passwords for the following accounts: 'root'@'%', 'root'@'127.0.0.1'. When I type select user, host, authentication_string from mysql.user I get different values for the ...
0
votes
1answer
30 views

Why has my root password changed after I updated MySQL from 5.7 to 8.0?

I have set my root account passwords like this: mysql -u root SET PASSWORD FOR 'root'@'localhost' = PASSWORD('pswd1'); SET PASSWORD FOR 'root'@'127.0.0.1' = PASSWORD('pswd2'); SET PASSWORD FOR 'root'@'...
0
votes
0answers
21 views

How can I login to MySQL as 127.0.0.1 or ::1 instead of localhost?

I've set different password for 'root'@'localhost' and 'root'@'127.0.01' like this: mysql -u root SET PASSWORD FOR 'root'@'localhost' = PASSWORD('pswd1'); SET PASSWORD FOR 'root'@'127.0.0.1' = ...
0
votes
0answers
29 views

Is there a way to pass the password more securely while scheduling backups in MySQL?

I run the batch file like this: mysqldump.exe --user=uuu --password=pswd --host=localhost --port=3306 --result-file="c:\mydata\backups\db_backup.%date:~0,2%-%date:~3,2%-%date:~6,4%_%time:~0,2%.%...
0
votes
1answer
27 views

Can't set root password after fresh installation of mariadb using ansible

Problem: After a fresh installation of mariadb 10.4 the root password could not be set using ansible. When installing mariadb from the debian packages by mariadb (not the official debian packages), ...
0
votes
1answer
36 views

What's wrong with my provided admin password for Oracle Apex instance administrator account?

I have installed Oracle Database 19c Enterprise Edition on Oracle Linux 7.8.I am now trying to install Apex 20.1 . Got to the chapter "5.4.2.3 Running apxchpwd.sql" to set the instance ...
1
vote
4answers
7k views

Default phpMyAdmin Login Credentials

I downloaded and installed phpMyAdmin 4.8.5 on my windows. Upon opening it in the browser, it immediately asks for a Username and Password. I tried to submit root for username while leaving the ...
2
votes
2answers
105 views

Secure MySQL-Server completely (disable ability to reset root-password)

is there a way to secure a mysql-server so no one can reset a password via --init-file-startup? there should only be a: "root" user (password not known to anyone else than person a) "system" user (...
2
votes
1answer
1k views

Passwordless mysqldump via shell script in /etc/cron.daily

I'm aware that there are dozens of questions similar to this, but it seems none has a definitive answer to my problem, so that's why I'm posting this... I hope in the right place. The problem: I ...
1
vote
3answers
11k views

Bypassing Password Verify Function

I am considering making a recommendation to enforce a password verify function that will not allow users to change their own passwords. My understanding of the PASSWORD_VERIFY_FUNCTION in Oracle is ...
2
votes
1answer
52 views

Function accepts only certain passwords in postgreSQL

I have created a function in a postgreSQL(v10.10) database to create new users or update existing ones. As parameters you pass the username, password, role memberships, first name and last name. In my ...
1
vote
2answers
217 views

MariaDB 10.0.25 installs without configuration

While trying to install MariaDB on Ubuntu 15.10, I issue command $ sudo apt-get install mariadb-server and it outputs Reading package lists... Done Building dependency tree Reading state ...
1
vote
1answer
75 views

Generating a password that matches the Password Validation Component

MySQL 8 has a pretty sophisticated "Password Validation Component" (this replaces the validate_password plugin). It has a lot of options, validate_password.number_count validate_password....
16
votes
1answer
9k views

Does sys.sql_logins.is_policy_checked mean that the policy has been checked?

When I look in sys.sql_logins, I see a column called is_policy_checked. Can I trust that my password policy has been checked for all of the logins where this column value is 1?
1
vote
0answers
25 views

ODBC.ini Password to MS SQL [closed]

I want to change password to a more complex one. I have access as SA to the MS SQL database and it's no problem to change the password. The problem is: I have a odbc.ini for a Windows programm to use. ...
0
votes
1answer
70 views

Set up a postgres database with a specific role without password prompt

Context I have a PostgreSQL server (localhost:5432) which holds a database called my_database. I have created long time ago, a simple role which owns this database; my_user, different from the ...
11
votes
8answers
18k views

How can I make MySQL client read password from mylogin.cnf?

I'm trying to make the mysql client connect to a mysql server without requiring the password to be given interactively. Steps taken: 1) First create a mylogin.cnf file $ mysql_config_editor set --...
0
votes
1answer
21 views

Defining password complexity and its action on “grace” state USERS

I have Oracle USERS linked to external applications that came to "grace" status. I tried to change the assword time expiration to unlimited but it doesn't apply to those account (considering I guess ...
0
votes
0answers
63 views

SET PASSWORD vs ALTER USER

On a fresh MariaDB install (10.4.12) if I do mariadb-admin password ... or SET PASSWORD = PASSWORD('...'); for a root user, that doesn't force me to use password to authenticate. But when I do: ...
1
vote
2answers
2k views

Granting password protected role to another role problem in Oracle

I can grant a role to another role unless the granted role is password protected, even when I know the password. I keep getting "ORA-00990: missing or invalid privilege" The system privileges the ...
1
vote
1answer
38 views

Logging security events in MSSQL

I need to log events of admin changing someone's password, and user changing his password. How do I do that? I've found a nice solution based on Service Broker, however the resulting table only ...
1
vote
0answers
104 views

MySQL Password Validation - No previous passwords

I wonder if there is any possibility to use the password validation for MySQL 5.6 (https://dev.mysql.com/doc/refman/5.6/en/validate-password.html) to prevent for example the last 4 passwords. The ...
0
votes
2answers
553 views

MySQL 8.0.17 on Windows - I forgot my root password, dont need to keep any previous DBs

I have previously used MySQL for a class about a year ago and not since. I've forgotten the password and I need to use it again. I don't need to be able to access any previous databases, so I tried ...
6
votes
1answer
236 views

SQL Server - How does contained database user password expiration work?

I've recently started working with contained databases and I do not understand if/how contained database users have passwords that expire. MSDN documentation says they do - With a SQL Server login, ...
3
votes
2answers
94 views

Find accounts with passwords that are not complex

I can see all the SQL Login passwords that enforce the password policy with this command SELECT * FROM sys.sql_logins WHERE is_policy_checked = 1 However, it seems that when the enforce password ...
1
vote
2answers
4k views

In PostgreSQL URL I can't use a password containing special characters

I have a postgresql database in Azure The passwd string has special characters like these: )mvd99/iyH_=ag=Por/W}%%aKY^ygt+,sC7%%P?APOU psql --dbname=postgresql://db_user@mydemoserver:)mvd99/iyH_=ag=...
1
vote
1answer
3k views

can't update user password on Mongodb 4.0.5 (Use of SCRAM-SHA-256 requires undigested passwords)

I'm trying to update a password from a user, using changeUserPassword(), and I just receive the following message: Error: Updating user failed: Use of SCRAM-SHA-256 requires undigested passwords &...
2
votes
1answer
86 views

Log report 'bad password', but still grants access

Original symptom: User sa locked out, too many bad attempts. Problem was sudden (no issues before), and pervasive (couple of fails in one day). As this was a new roll out of SQL backend to Sage300, ...
2
votes
2answers
358 views

Change user password on slave

Our users can only access the slave database. How can I let them change their passwords on their own or when their passwords expire?
3
votes
4answers
11k views

MYSQL - Unable to change 'old_passwords' variable

I have full access to a 'MYSQL 5.0.27-community-nt-log' database one of our new updates for a core app requires PHP 5.4, after installing and configuring I'm stuck at the error regarding old vs. new ...
11
votes
3answers
20k views

Verifying password policy on existing users

I've recently come into an environment where a lot of databases logins do not have the enforce_password_policy flag enabled. An upcoming audit is necessitating the verification of these logins' ...
5
votes
2answers
24k views

ORA-01017: invalid username/password;logon denied

There were other similar questions asked, but none that were able to tell me why I can't connect using a C# .NET web site I've stood up. While I know this forum is more for DBAs connecting to ...
0
votes
1answer
675 views

How to know or recover my pg_dump password? [closed]

I would like to backup my Postgre db using pg_dump. However, the first question asked by the prompt is the password. But I have no idea what it is. Indeed, it is different from my admin account ...
0
votes
2answers
11k views

Retrieve user password in Oracle [closed]

How to obtain the password of a specified user in Oracle? What query to use to obtain that?
1
vote
1answer
575 views

How to verify if given user@host with 'password' exists in MySQL 8.0+?

I write sanity check script for an application. One of the tests is supposed to verify that a given user@host with 'password' exists in MySQL. I'm using simple native hash passwords. In MySQL5.7- ...
1
vote
1answer
1k views

Problems with connecting to a remote Oracle 12c database

tl;dr RMAN failing to connect to standby database with correct credentials. RMAN-04006: error from auxiliary database: ORA-01017: invalid username/password; logon denied Password file is correct, ...
1
vote
0answers
51 views

Case sensitive logon on some users

Looking for a way to let selected users have case-sensitive logon check on Oracle 12.1. Setting SEC_CASE_SENSITIVE_LOGON = TRUE enables all users to have case sensitive logon, but trying to limit that ...
1
vote
1answer
774 views

Can the new “SCRAM-SHA-256” password authentication mechanism in Postgres 10 and later work with any JDBC drivers?

Postgres 10 added support for a new password authentication mechanism, Salted Challenge Response Authentication Mechanism (SCRAM-SHA-256, see RFC 7677). Discussed by Michael Paquier. ➥ Can this ...
1
vote
1answer
506 views

Is it overkill to encrypt an already hashed BCrypt password?

I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...
2
votes
1answer
327 views

Storing sensitive information in a SQL Server project

I am very new with encryption in SQL Server so I am stumbling over things that require prior experience. I have done my googling, but I need reassurance so here we go: Scenario I have a SQL Server ...
3
votes
1answer
398 views

Change expired user password on sql server from linux

I have got a colleague (software developer) working on Linux only. He connects to our SQL Server using a sql login with password. Occasionally the password expires and he has to choose a new one. Up ...
9
votes
2answers
8k views

Why are mysql password hashes internally saved with a star (asterisk)?

I was reading upon some mysql internals, when going through the mysql.user table in the my mysql shell, I get mysql> select * from mysql.user limit 1 \G *************************** 1. row *********...
10
votes
2answers
3k views

How do I hide sensitive information like plaintext passwords from the logs?

I do not have access to a Postgres installation, so I cannot check. I am a security guy, and I'm seeing plaintext passwords in the logs: create user user1 with password 'PLAINTEXT PASSWORD' How can ...
2
votes
3answers
730 views

Reset of root password not working?

Our previous DBA left and didn't note the root password down, and I've been pressganged into doing part of his job until we can hire someone. So I create a file : /root/mysql.password Inside that ...
0
votes
1answer
66 views

Why is random password generation the same when it's inside while loop? TSQL

I have a random password generator. It works fine by itself. When I put it inside of a while loop, I get the same password even though the seed appears to be different. declare @count int = 0 ...