Questions tagged [password]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
16
votes
1answer
8k views

Does sys.sql_logins.is_policy_checked mean that the policy has been checked?

When I look in sys.sql_logins, I see a column called is_policy_checked. Can I trust that my password policy has been checked for all of the logins where this column value is 1?
14
votes
1answer
4k views

Why would you use a managed service account rather than a virtual account in SQL Server 2012?

In SQL Server 2012, service accounts are created as virtual accounts (VAs), as described here, as opposed to managed service accounts (MSAs). The important differences I can see for these, based on ...
11
votes
3answers
18k views

Verifying password policy on existing users

I've recently come into an environment where a lot of databases logins do not have the enforce_password_policy flag enabled. An upcoming audit is necessitating the verification of these logins' ...
10
votes
7answers
15k views

How can I make MySQL client read password from mylogin.cnf?

I'm trying to make the mysql client connect to a mysql server without requiring the password to be given interactively. Steps taken: 1) First create a mylogin.cnf file $ mysql_config_editor set --...
8
votes
2answers
7k views

Why are mysql password hashes internally saved with a star (asterisk)?

I was reading upon some mysql internals, when going through the mysql.user table in the my mysql shell, I get mysql> select * from mysql.user limit 1 \G *************************** 1. row *********...
8
votes
2answers
2k views

How do I hide sensitive information like plaintext passwords from the logs?

I do not have access to a Postgres installation, so I cannot check. I am a security guy, and I'm seeing plaintext passwords in the logs: create user user1 with password 'PLAINTEXT PASSWORD' How can ...
7
votes
1answer
927 views

Is there any way to prevent a PostgreSQL user to change his/her own password?

I'm administering a PotsgreSQL server and recently I realized that my "nonsuperuser" users have the possibility to change the secure passwords that I assign them for insecure ones. I searched in the ...
6
votes
1answer
11k views

How to lock a sql login after N unsuccessful login attempts

Consider I have login called sql_login. Can I lock sql_login login after 5 unsuccessful login attempts. When we create a login we can see there is option called password policy check the image. But ...
5
votes
2answers
20k views

ORA-01017: invalid username/password;logon denied

There were other similar questions asked, but none that were able to tell me why I can't connect using a C# .NET web site I've stood up. While I know this forum is more for DBAs connecting to ...
5
votes
1answer
82 views

SQL Server - How does contained database user password expiration work?

I've recently started working with contained databases and I do not understand if/how contained database users have passwords that expire. MSDN documentation says they do - With a SQL Server login, ...
4
votes
2answers
365 views

MS SQL Server, ask password before drop specific DB

I've got 2 databases which are very important for our organization. I would like to prevent an accidental drop/delete of them... Do you have any suggestion? I was thinking about asking a password ...
4
votes
3answers
7k views

Password generator function

What's the best way of creating a password generator user defined function function in SQL Server if it is not possible to use non deterministic funtions within functions? I would like to create a ...
4
votes
2answers
2k views

Why shouldn't a pre-hashed password be used with CREATE LOGIN all the time?

(For the purpose of this question, assume that I only need to support SQL Server 2008 and higher. Or to future-proof this question, let's say recent, current, and near-future versions.) The ...
4
votes
1answer
3k views

psql is not prompting me for a password, then denies access

I'm using Postgres 9.4 on Debian Linux. I created a database with a user, cindex with access to the database. Yet when I try and login at the command line, I'm not even prompted for a password: ...
4
votes
1answer
3k views

Changing Service Account password in SQL Server - Clarification

We have the SQL Server Service and SQL Server Credential using same AD Level service Account. Because of recent security changes we need to change the Service account password at AD Level. At this ...
3
votes
2answers
8k views

What is the max length of oracle user passwords?

I'm using the Oracle Verify Function 12c - the max password length seem to be < 30 charcters. Can I change that?
3
votes
2answers
3k views

Handle expired SQL login's passwords in SQL Server

Is it possible to change the password for a login with an expired password using SQL Server Management Objects (SMO) programming? Many times during working hours I got this message from a production ...
3
votes
2answers
345 views

How can I switch to sa account from guest session in SQL server 2012?

I have a situation where I can log into my server as guest, and see that there is no password on the sa account. However when I try to login as sa with null password over the network it is rejected. ...
3
votes
1answer
162 views

In which form Microsoft SQL password should be given when creating a user?

I am creating a Microsoft SQL server user with the guidance of this MSDN article and giving the system the following commands: CREATE LOGIN MyName WITH PASSWORD = 'MyPass'; USE My$DatabaseName; ...
3
votes
1answer
4k views

Forgot mysql owner/root username and password

Recently, I changed my mysql root user to someother username (say kevin). But, now both the accounts don't login with the old password. It says access denied. I'm also not sure if the username is ...
3
votes
1answer
3k views

psql, I try to connect to a database and I get “psql: FATAL: Peer authentication failed for user ”, why?

I'm using psql (9.2.23) on my Dell Latitude 3540 laptop running Linux CentOS 7. I want to do a simple thing: create a database username and log in as that username. My operating system username is "...
3
votes
4answers
9k views

MYSQL - Unable to change 'old_passwords' variable

I have full access to a 'MYSQL 5.0.27-community-nt-log' database one of our new updates for a core app requires PHP 5.4, after installing and configuring I'm stuck at the error regarding old vs. new ...
3
votes
2answers
77 views

Find accounts with passwords that are not complex

I can see all the SQL Login passwords that enforce the password policy with this command SELECT * FROM sys.sql_logins WHERE is_policy_checked = 1 However, it seems that when the enforce password ...
3
votes
1answer
265 views

Change expired user password on sql server from linux

I have got a colleague (software developer) working on Linux only. He connects to our SQL Server using a sql login with password. Occasionally the password expires and he has to choose a new one. Up ...
3
votes
2answers
1k views

How do I connect to mysql without having to type an empty password?

I just installed MySQL, and by default the root user has no password. If I connect with this command: mysql --port=3307 --host=127.0.0.1 -uroot -p It asks me to enter a password, I just hit return, ...
3
votes
1answer
433 views

Error with restoring from a split .bak file with password

I am trying to restore a backup from a split .bak file[.bak_1/.bak_2/.bak_3]. The backup is password protected. So far this is what I have and I cannot seem to format in a way that does not throw me ...
3
votes
1answer
2k views

AWS RDS Postgres pg_hba.conf auth-method

I'm starting to use Amazon Web Service's Relational Database Server product (AWS RDS) and want to confirm I have not made a security blunder. My configuration: Postgres Publicly accessible Inbound ...
3
votes
1answer
361 views

Change mysql password interactively

Is it possible to change the user password in mysql in an interactive mode like it one can do in PostgreSQL for example using \password command? My goal is not to provide the new password together ...
3
votes
2answers
8k views

DB2 to require password each time

I am using db2inst1 to connect to a database in DB2 which I have installed on my machine. Therefore, db2inst1 user does not require username/password authentication (borrows them from the OS). I would ...
2
votes
1answer
3k views

SQL Server credentials - Maximum Password size

What's the maximum password size I can get on SQL Server 2012/2014? I was unable to find this information online. I mean SQL Server credentials itself, not passwords inside tables. Thanks a lot
2
votes
1answer
791 views

Passwordless mysqldump via shell script in /etc/cron.daily

I'm aware that there are dozens of questions similar to this, but it seems none has a definitive answer to my problem, so that's why I'm posting this... I hope in the right place. The problem: I ...
2
votes
4answers
3k views

SQl Server Password Change after installation

I have installed SQL Server 2005, but at the time of installation I forgot to change my password. Now I can access my database only in Windows authentication mode, and I want to access the database in ...
2
votes
1answer
60 views

Log report 'bad password', but still grants access

Original symptom: User sa locked out, too many bad attempts. Problem was sudden (no issues before), and pervasive (couple of fails in one day). As this was a new roll out of SQL backend to Sage300, ...
2
votes
1answer
1k views

What are the risks of changing oracle sys password?

I need to change some old databases SYS password because of security. I'm not DBA of these databases. I don't know if I will change SYS password what it will be happen. What are the risks of ...
2
votes
1answer
233 views

Storing sensitive information in a SQL Server project

I am very new with encryption in SQL Server so I am stumbling over things that require prior experience. I have done my googling, but I need reassurance so here we go: Scenario I have a SQL Server ...
2
votes
2answers
5k views

New and old passwords on same MySQL database?

Is it possible to set up a user in MySQL 5.5 with a new password whilst keeping existing users with the old type of passwords? By old and new passwords I mean the style of hash. I was thinking I ...
2
votes
1answer
9k views

How to recover a lost password in MySQL 5.7.11? (for Windows)

I am running MySQL 5.7.11 on Windows 10 I am unable to login to root through the command line client since I lost my password. How do I change/reset the old password? Please help, and thanks in ...
2
votes
1answer
776 views

Changing SQL account password in specific database

I am trying to change the password for userId in a specific database called LionsDB. If I am changing the password manually, I would login into SQL Management Studio using that user account and update ...
2
votes
3answers
2k views

Query to find users with passwords same as their username in Oracle

I'm writing an Oracle audit script where I need to find users in a database who have set their passwords to be the same as their username, e.g. dbaadmin/dbaadmin. The query would need to get the list ...
2
votes
3answers
643 views

Reset of root password not working?

Our previous DBA left and didn't note the root password down, and I've been pressganged into doing part of his job until we can hire someone. So I create a file : /root/mysql.password Inside that ...
2
votes
2answers
242 views

Change user password on slave

Our users can only access the slave database. How can I let them change their passwords on their own or when their passwords expire?
2
votes
1answer
74 views

Secure MySQL-Server completely (disable ability to reset root-password)

is there a way to secure a mysql-server so no one can reset a password via --init-file-startup? there should only be a: "root" user (password not known to anyone else than person a) "system" user (...
2
votes
0answers
52 views

SQL Server not checking for expired passwords

We are using SQL Server 2005 on Windows Server 2008 with Windows Authentication where access is granted to members of a specific domain group. Clients are VB6/ADO applications that connect via an ...
2
votes
0answers
2k views

MySQL workbench won't import my sql file

I have an SQL file im trying to import via mysqlworkbench but I keep getting the error: Access denied for user 'wordpressuser79'@'localhost' (using password: NO) Operation failed with exitcode 1 ...
2
votes
0answers
2k views

Why OEM RMAN backup jobs fail after changing the preferred credentials?

In an Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production, Running on Oracle Linux 6.5, we configured full RMAN backup schedule using OEM (Oracle Enterprise Manager 11g ...
2
votes
1answer
3k views

Recover encrypted Oracle database

A client fired their DBA. He used OWM to add a wallet to their Oracle database and secure a few necessary columns of tables that they need. I can see the walled using: orapki wallet display -wallet /...
1
vote
1answer
661 views

“sudo -u postgres psql postgres” does not ask for password

I've taken over a system using postgres. When logging in, if I use ... sudo -u postgres psql postgres ...it does NOT ask for a password. However, if I do ... psql -U postgres -h localhost postgres ...
1
vote
2answers
5k views

Oracle: Can a user log in without a password?

I'm writing a sqplus-like program. I assume the connect string contains the password if it contains a slash, e.g. scott/tiger or scott/tiger@orcl. if connect string does not contain "/": prompt ...
1
vote
1answer
501 views

Can the new “SCRAM-SHA-256” password authentication mechanism in Postgres 10 and later work with any JDBC drivers?

Postgres 10 added support for a new password authentication mechanism, Salted Challenge Response Authentication Mechanism (SCRAM-SHA-256, see RFC 7677). Discussed by Michael Paquier. ➥ Can this ...
1
vote
1answer
479 views

Is it overkill to encrypt an already hashed BCrypt password?

I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...