I thought (for a micro-second, and very smug I was too) that we'd be
more-or-less safe from crack attempts as we're going to be using in 9iAS
R2's Active Directory bit to authenticate from our AD servers.
But, thought I, the AD implementation on Oracle is a sub-set of master LDAP
- they're not banging on the read AD tree, just a select set OF the tree.
Which means .. someone using this crack tool on an Oracle server running the
AD/LDAP authentication can crack the AD/LDAP tree?
Tell me if I'm right or not ... our AD admins aren't going to be happy.
~brian
-----Original Message-----
Sent: Tuesday, December 17, 2002 11:09 AM
To: Multiple recipients of list ORACLE-L
Hmm...
Well maybe you *can* crack oracle passwords.
I've just ordered the full version of this product. ( $4, I don't
think I need to bother the purchasing department ).
I'll let you know how it works.
Jared
"Mark Leith" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
12/17/2002 06:23 AM
Please respond to ORACLE-L
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
cc:
Subject: RE: password
Yes, you can do this, but it still doesn't tell you the users *current*
password does it?
Has anyone tried:
http://home.earthlink.net/~adamshalon/oracle_password_cracker/
?
Mark
-----Original Message-----
Sent: 17 December 2002 13:59
To: Multiple recipients of list ORACLE-L
And you can use it to change it to your convenience and later
get this encrypted password "IN" without the knowledge of
the user..
Regards
Jai
Paulo Gomes <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
12/17/02 06:08 PM
Please respond to ORACLE-L
To: Multiple recipients of list ORACLE-L
<[EMAIL PROTECTED]>
cc:
Subject: RE: password
nope u can get the encripted password from the oracle dictionáry
-----Original Message-----
Sent: terça-feira, 17 de Dezembro de 2002 11:34
To: Multiple recipients of list ORACLE-L
Check the post-it note on their monitor?
:)
-----Original Message-----
Sent: 17 December 2002 10:55
To: Multiple recipients of list ORACLE-L
he can't but he can change it to a new one and then put the old back on
-----Original Message-----
Sent: terça-feira, 17 de Dezembro de 2002 4:09
To: Multiple recipients of list ORACLE-L
how can a dba see the password of a user.
The new MSN 8: smart spam protection and 2 months FREE* -- Please see the
official
ORACLE-L FAQ: http://www.orafaq.com -- Author: faisal ahmad INET:
[EMAIL PROTECTED] Fat City Network
Services -- 858-538-5051 http://www.fatcity.com San Diego, California --
Mailing list and web hosting services
--------------------------------------------------------------------- To
REMOVE yourself from this mailing list, send an E-Mail message to:
[EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the
message BODY, include a line containing: UNSUB ORACLE-L (or the name of
mailing list you want to be removed from). You may also send the HELP
command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Brian Dunbar
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
