Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

create database link identified by values?

3,599 views
Skip to first unread message

hehehe

unread,
Aug 27, 2009, 9:56:46 AM8/27/09
to
Hello!

It`s possible? When a get from dba_users hash password id like to create
database link with this password like this :
create database link connect to 'test' identified by values '1234124213'
using 'test';

But if i try its is possible but when i create new user

create user test identified by values '2134123123231' profile wer;
its works

regards - MJ


Michel Cadot

unread,
Aug 27, 2009, 10:07:49 AM8/27/09
to

"hehehe" <m...@m.ccc> a �crit dans le message de news: h763b0$1tnt$1...@news2.ipartners.pl...

No it is not possible.

Regards
Michel


joel garry

unread,
Aug 27, 2009, 1:26:07 PM8/27/09
to
On Aug 27, 7:07 am, "Michel Cadot" <micadot{at}altern{dot}org> wrote:
> "hehehe" <m...@m.ccc> a écrit dans le message de news: h763b0$1tn...@news2.ipartners.pl...

> | Hello!
> |
> | It`s possible? When a get from dba_users  hash password id like to create
> | database link with this password like this :
> | create database link connect to 'test' identified by values '1234124213'
> | using 'test';
> |
> | But if i try its is possible but when i create new user
> |
> | create user test identified by values '2134123123231' profile wer;
> | its works
> |
> | regards - MJ
> |
> |
>
> No it is not possible.
>
> Regards
> Michel

Not in dba_users, but if I grep for "DATABASE LINK" in a full rows=N
export, I see something just like that, it is different than the user
password on the linked db.

But...
select passwordx from KU$_DBLINK_VIEW;

Version dependent, I would guess.

jg
--
@home.com is bogus.
Not only offensive, but isn't that a Mac...?
http://www.cnn.com/2009/TECH/08/26/microsoft.ad.gaffe/index.html?iref=mpstoryview

Mark D Powell

unread,
Aug 28, 2009, 8:51:49 AM8/28/09
to
> Not only offensive, but isn't that a Mac...?http://www.cnn.com/2009/TECH/08/26/microsoft.ad.gaffe/index.html?iref...- Hide quoted text -
>
> - Show quoted text -

Definitely version dependent. Using a 9.2.0.6 exp dmp file I can grep
out the database link create and the password is in plain text. The
password is available to the DBA via the interal base table sys.link$
in plain text.

With 10g the same commands show that Oracle switched to using an
identified by values type format with database links just as it does
for users. On 10g the password in link$ is a hashed value.

HTH -- Mark D Powell --

Maxim Demenko

unread,
Aug 28, 2009, 9:42:08 AM8/28/09
to Mark D Powell
Mark D Powell wrote:
> On Aug 27, 1:26 pm, joel garry <joel-ga...@home.com> wrote:
>> On Aug 27, 7:07 am, "Michel Cadot" <micadot{at}altern{dot}org> wrote:
>>
>>
>>
>>
>>
>>> "hehehe" <m...@m.ccc> a �crit dans le message de news: h763b0$1tn...@news2.ipartners.pl...

The use of "identified by values" in create database link statement is
intended for export/import internal routines and not for end user as
stated in Doc. Id. 456320.1 . Additionally (mentioned in the same note)
password hashes used in "create database link" statement are encrypted
(from 10.2 onwards) and not equal to hashes visible in dba_users .

However, if you retrieve the "create database link" statement from
existing database links using dbms_metadata - you get a suitable for
dblink creation (encrypted) password hash.


Best regards

Maxim

0 new messages