Home » RDBMS Server » Security » Create user using another user's password
Create user using another user's password [message #250204] Mon, 09 July 2007 02:21 Go to next message
LaFilipina
Messages: 51
Registered: May 2007
Location: spain
Member
Hi,

Anyone knows how to create a user and applying the password of another user, without the dba knowing the actual password? I am not even sure if this is ever possible.

Let me know your thoughts.

Thanks!
Re: Create user using another user's password [message #250228 is a reply to message #250204] Mon, 09 July 2007 03:32 Go to previous messageGo to next message
Michel Cadot
Messages: 68625
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
This is not possible.

Regards
Michel
Re: Create user using another user's password [message #250252 is a reply to message #250204] Mon, 09 July 2007 05:44 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
Well the DBA can create a user account (user2) with another user's password (user1), but user1 needs to let user2 know what the password is.

create user user2 identified by values '<insert_user1_hashed_password_from_dba_users_table>';
Re: Create user using another user's password [message #250255 is a reply to message #250252] Mon, 09 July 2007 05:50 Go to previous messageGo to next message
LaFilipina
Messages: 51
Registered: May 2007
Location: spain
Member
ebrian wrote on Mon, 09 July 2007 05:44
Well the DBA can create a user account (user2) with another user's password (user1), but user1 needs to let user2 know what the password is.

create user user2 identified by values '<insert_user1_hashed_password_from_dba_users_table>';



Thanks, ebrian. But I believe this is not possible. The hash value for the password is generated using the combination of the user's name and password... therefore, if I use the same hash value from user1 to user2, in the end, the actual password will be different as the user name is different. I am not sure if I have explained myself clear but it's something to that effect.

Re: Create user using another user's password [message #250257 is a reply to message #250255] Mon, 09 July 2007 05:54 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
Yes indeed, the password is a hash between the username and password.

Sorry, I overlooked that since I've always just used that process to connect as a particular user and then change that password and then change the password back to the old value.
Re: Create user using another user's password [message #250266 is a reply to message #250257] Mon, 09 July 2007 06:12 Go to previous messageGo to next message
Michel Cadot
Messages: 68625
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
This is why it is not possible.

Regards
Michel
Re: Create user using another user's password [message #250292 is a reply to message #250266] Mon, 09 July 2007 08:53 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
Michel Cadot wrote on Mon, 09 July 2007 07:12
This is why it is not possible.

Ahhh...right...that is why I conceded to my oversight !
Re: Create user using another user's password [message #250317 is a reply to message #250204] Mon, 09 July 2007 11:05 Go to previous message
LaFilipina
Messages: 51
Registered: May 2007
Location: spain
Member
Thanks guys, It looks like there is no other way but have the users reset the password on the new user ID.

Previous Topic: DDL auditing
Next Topic: Please Suggest some privelege
Goto Forum:
  


Current Time: Fri Mar 29 02:12:30 CDT 2024