We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [password]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
3answers
2k views

Default phpMyAdmin Login Credentials

I downloaded and installed phpMyAdmin 4.8.5 on my windows. Upon opening it in the browser, it immediately asks for a Username and Password. I tried to submit root for username while leaving the ...
1
vote
1answer
31 views

Logging security events in MSSQL

I need to log events of admin changing someone's password, and user changing his password. How do I do that? I've found a nice solution based on Service Broker, however the resulting table only ...
1
vote
0answers
34 views

MySQL Password Validation - No previous passwords

I wonder if there is any possibility to use the password validation for MySQL 5.6 (https://dev.mysql.com/doc/refman/5.6/en/validate-password.html) to prevent for example the last 4 passwords. The ...
1
vote
2answers
202 views

MariaDB 10.0.25 installs without configuration

While trying to install MariaDB on Ubuntu 15.10, I issue command $ sudo apt-get install mariadb-server and it outputs Reading package lists... Done Building dependency tree Reading state ...
0
votes
2answers
66 views

MySQL 8.0.17 on Windows - I forgot my root password, dont need to keep any previous DBs

I have previously used MySQL for a class about a year ago and not since. I've forgotten the password and I need to use it again. I don't need to be able to access any previous databases, so I tried ...
0
votes
1answer
93 views

MySql global variable disconnect_on_expired_password

This is very annoying.... disconnect_on_expired_password is set to ON. MySql version is: Server: Localhost via UNIX socket Server type: MySQL Server version: 5.7.5-m15 - MySQL Community Server (GPL) ...
5
votes
1answer
80 views

SQL Server - How does contained database user password expiration work?

I've recently started working with contained databases and I do not understand if/how contained database users have passwords that expire. MSDN documentation says they do - With a SQL Server login, ...
3
votes
2answers
77 views

Find accounts with passwords that are not complex

I can see all the SQL Login passwords that enforce the password policy with this command SELECT * FROM sys.sql_logins WHERE is_policy_checked = 1 However, it seems that when the enforce password ...
0
votes
1answer
232 views

Cannot change MySQL root password

I have run the following commands found here. shell> mysql mysql> FLUSH PRIVILEGES; mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'MyNewPass' But when I go to login as root, I can type ...
0
votes
2answers
264 views

In PostgreSQL URL I can't use a password containing special characters

I have a postgresql database in Azure The passwd string has special characters like these: )mvd99/iyH_=ag=Por/W}%%aKY^ygt+,sC7%%P?APOU psql --dbname=postgresql://db_user@mydemoserver:)mvd99/iyH_=ag=...
16
votes
1answer
8k views

Does sys.sql_logins.is_policy_checked mean that the policy has been checked?

When I look in sys.sql_logins, I see a column called is_policy_checked. Can I trust that my password policy has been checked for all of the logins where this column value is 1?
0
votes
1answer
826 views

can't update user password on Mongodb 4.0.5 (Use of SCRAM-SHA-256 requires undigested passwords)

I'm trying to update a password from a user, using changeUserPassword(), and I just receive the following message: Error: Updating user failed: Use of SCRAM-SHA-256 requires undigested passwords &...
2
votes
1answer
59 views

Log report 'bad password', but still grants access

Original symptom: User sa locked out, too many bad attempts. Problem was sudden (no issues before), and pervasive (couple of fails in one day). As this was a new roll out of SQL backend to Sage300, ...
2
votes
2answers
240 views

Change user password on slave

Our users can only access the slave database. How can I let them change their passwords on their own or when their passwords expire?
2
votes
1answer
787 views

Passwordless mysqldump via shell script in /etc/cron.daily

I'm aware that there are dozens of questions similar to this, but it seems none has a definitive answer to my problem, so that's why I'm posting this... I hope in the right place. The problem: I ...
10
votes
7answers
14k views

How can I make MySQL client read password from mylogin.cnf?

I'm trying to make the mysql client connect to a mysql server without requiring the password to be given interactively. Steps taken: 1) First create a mylogin.cnf file $ mysql_config_editor set --...
3
votes
4answers
9k views

MYSQL - Unable to change 'old_passwords' variable

I have full access to a 'MYSQL 5.0.27-community-nt-log' database one of our new updates for a core app requires PHP 5.4, after installing and configuring I'm stuck at the error regarding old vs. new ...
11
votes
3answers
17k views

Verifying password policy on existing users

I've recently come into an environment where a lot of databases logins do not have the enforce_password_policy flag enabled. An upcoming audit is necessitating the verification of these logins' ...
5
votes
2answers
20k views

ORA-01017: invalid username/password;logon denied

There were other similar questions asked, but none that were able to tell me why I can't connect using a C# .NET web site I've stood up. While I know this forum is more for DBAs connecting to ...
0
votes
1answer
277 views

How to know or recover my pg_dump password? [closed]

I would like to backup my Postgre db using pg_dump. However, the first question asked by the prompt is the password. But I have no idea what it is. Indeed, it is different from my admin account ...
0
votes
0answers
18 views

Decrypt RSSD maint password in Replication Server version 15.7.1

Is anyone knows any possibilities to decrypt an encrypted RSSD maint password in the Replication Server configuration file? Thanks in advance.
0
votes
2answers
4k views

Retrieve user password in Oracle [closed]

How to obtain the password of a specified user in Oracle? What query to use to obtain that?
1
vote
1answer
290 views

How to verify if given user@host with 'password' exists in MySQL 8.0+?

I write sanity check script for an application. One of the tests is supposed to verify that a given user@host with 'password' exists in MySQL. I'm using simple native hash passwords. In MySQL5.7- ...
1
vote
1answer
637 views

Problems with connecting to a remote Oracle 12c database

tl;dr RMAN failing to connect to standby database with correct credentials. RMAN-04006: error from auxiliary database: ORA-01017: invalid username/password; logon denied Password file is correct, ...
1
vote
0answers
45 views

Case sensitive logon on some users

Looking for a way to let selected users have case-sensitive logon check on Oracle 12.1. Setting SEC_CASE_SENSITIVE_LOGON = TRUE enables all users to have case sensitive logon, but trying to limit that ...
1
vote
1answer
492 views

Can the new “SCRAM-SHA-256” password authentication mechanism in Postgres 10 and later work with any JDBC drivers?

Postgres 10 added support for a new password authentication mechanism, Salted Challenge Response Authentication Mechanism (SCRAM-SHA-256, see RFC 7677). Discussed by Michael Paquier. ➥ Can this ...
1
vote
1answer
479 views

Is it overkill to encrypt an already hashed BCrypt password?

I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...
2
votes
1answer
231 views

Storing sensitive information in a SQL Server project

I am very new with encryption in SQL Server so I am stumbling over things that require prior experience. I have done my googling, but I need reassurance so here we go: Scenario I have a SQL Server ...
3
votes
1answer
263 views

Change expired user password on sql server from linux

I have got a colleague (software developer) working on Linux only. He connects to our SQL Server using a sql login with password. Occasionally the password expires and he has to choose a new one. Up ...
0
votes
1answer
51 views

ISO 27001 - resetting passwords for SQL Server accounts

We are implementing security changes in order to pass an ISO 27001 audit. We are in the process of setting all domain accounts (user accounts, admin accounts, service accounts) to have their passwords ...
8
votes
2answers
7k views

Why are mysql password hashes internally saved with a star (asterisk)?

I was reading upon some mysql internals, when going through the mysql.user table in the my mysql shell, I get mysql> select * from mysql.user limit 1 \G *************************** 1. row *********...
2
votes
1answer
73 views

Secure MySQL-Server completely (disable ability to reset root-password)

is there a way to secure a mysql-server so no one can reset a password via --init-file-startup? there should only be a: "root" user (password not known to anyone else than person a) "system" user (...
8
votes
2answers
2k views

How do I hide sensitive information like plaintext passwords from the logs?

I do not have access to a Postgres installation, so I cannot check. I am a security guy, and I'm seeing plaintext passwords in the logs: create user user1 with password 'PLAINTEXT PASSWORD' How can ...
2
votes
3answers
642 views

Reset of root password not working?

Our previous DBA left and didn't note the root password down, and I've been pressganged into doing part of his job until we can hire someone. So I create a file : /root/mysql.password Inside that ...
0
votes
1answer
56 views

Why is random password generation the same when it's inside while loop? TSQL

I have a random password generator. It works fine by itself. When I put it inside of a while loop, I get the same password even though the seed appears to be different. declare @count int = 0 ...
1
vote
0answers
118 views

Resetting MySQL Workbench 6.3 CE password

I'm a rookie using MySql Workbench 6.3 CE on Windows 10. Before I could even try to open my first data table to begin learning SQL, I've managed to forget my password. Can someone help me re-set it ...
3
votes
1answer
3k views

psql, I try to connect to a database and I get “psql: FATAL: Peer authentication failed for user ”, why?

I'm using psql (9.2.23) on my Dell Latitude 3540 laptop running Linux CentOS 7. I want to do a simple thing: create a database username and log in as that username. My operating system username is "...
3
votes
1answer
2k views

AWS RDS Postgres pg_hba.conf auth-method

I'm starting to use Amazon Web Service's Relational Database Server product (AWS RDS) and want to confirm I have not made a security blunder. My configuration: Postgres Publicly accessible Inbound ...
1
vote
1answer
658 views

“sudo -u postgres psql postgres” does not ask for password

I've taken over a system using postgres. When logging in, if I use ... sudo -u postgres psql postgres ...it does NOT ask for a password. However, if I do ... psql -U postgres -h localhost postgres ...
3
votes
2answers
8k views

What is the max length of oracle user passwords?

I'm using the Oracle Verify Function 12c - the max password length seem to be < 30 charcters. Can I change that?
0
votes
1answer
1k views

MySQL passwords SHA512 using AES_ENCRYPT instead of ENCRYPT?

A tutorial is asking me to encrypt passwords using SHA512 in the following manner: INSERT INTO `vir_users` (`id`, `domain_id`, `password` , `email`) VALUES ('1', '1', ENCRYPT('pw1', CONCAT('$6$', ...
0
votes
2answers
3k views

Deploying and running SSIS packages to SQL Server with protection level EncryptSensitiveWithPassword

I have an SSIS package that connects to both a SQL Server instance and a MySQL instance so it can feed data from the SQL Server to the MySQL instance. When I deployed this package to the SQL Server ...
1
vote
2answers
10k views

Bypassing Password Verify Function

I am considering making a recommendation to enforce a password verify function that will not allow users to change their own passwords. My understanding of the PASSWORD_VERIFY_FUNCTION in Oracle is ...
4
votes
1answer
3k views

psql is not prompting me for a password, then denies access

I'm using Postgres 9.4 on Debian Linux. I created a database with a user, cindex with access to the database. Yet when I try and login at the command line, I'm not even prompted for a password: ...
1
vote
1answer
224 views

MariaDB multiple auth modules for a user?

MariaDB has pluggable authentication, like PostgreSQL. Unlike PostgreSQL, I can't figure out how to support two forms of auth for a user. For instance, in PostgreSQL we can have the following in our ...
1
vote
1answer
799 views

Can not reset MariaDB password “can't connect to local MySQL server through socket”

When I go mysqld_safe --skip-grant-tables & This message is outputted. 170802 14:14:15 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql When I try to run mariadb, I get $...
14
votes
1answer
4k views

Why would you use a managed service account rather than a virtual account in SQL Server 2012?

In SQL Server 2012, service accounts are created as virtual accounts (VAs), as described here, as opposed to managed service accounts (MSAs). The important differences I can see for these, based on ...
4
votes
1answer
3k views

Changing Service Account password in SQL Server - Clarification

We have the SQL Server Service and SQL Server Credential using same AD Level service Account. Because of recent security changes we need to change the Service account password at AD Level. At this ...
7
votes
1answer
915 views

Is there any way to prevent a PostgreSQL user to change his/her own password?

I'm administering a PotsgreSQL server and recently I realized that my "nonsuperuser" users have the possibility to change the secure passwords that I assign them for insecure ones. I searched in the ...
0
votes
1answer
12k views

Oracle 12 set user password Expiration date or EXPIRED(Grace)

Is it possible to set a future expiration date on a user account in Oracle? Or to set a account status to EXPIRE(GRACE) We want to implement a more strict password policy, and I've created the new ...