DBA

Location of Oracle Password hashes

* Database -sys.user$ -password
*Oracle Password File
*Data File of the system Tablespace
*(full) Export Files
*archive logs

Show oracle password hashkey

sql>select username,password from dba_users;

sql>select name,password from sys.user$ where password is notnull.

How to change an Oracle Password?

You should always use the pasword because the password is sent unencrypted over the net If you use the alter user syntax.

* alter user myuser identified bu my!supersecretpassword;

*grant connect to myuser identified by my!supersecretpassword

*update sys.user$ set password='F894844C34402B67' WHERE name='SCOTT';restart the database necessary

*sql*plus command:password or password username.

How to change an Oracle password temporarily?

In Oracle it is possible to change a password temporarily. This can be useful for DBA which act as a different user.

SQL> select username,password from dba_users where username='SCOTT';

USERNAME PASSWORD-------- ----------------SCOTT F894844C34402B67

SQL> alter user scott identified by mypassword;

Now login with the following credentials: scott/tigerAfter doing your work you can change the password back by using an undocumented feature called "by values"

SQL> alter user scott identified by values 'F894844C34402B67';

http://www.red-database-security.com/whitepaper/oracle_passwords.html