Oracle 8i : How To Know The User Password
Hi Everyone
I' am a developer, Developing Business System with Oracle 8i Ver 8.1.6 and Developer 6i
I Create a schema called Bank_Acct, and I Created many users and grant each user a role on some tables according
to his work, I Notice That, Some User Can know the Password of The User Bank_Acct easily, I changed The Password in the evining, and they can know it in the morning, I was very carful when i changed the password, but i thing there is a log file or anything else, they use it to know the password.
Thank You
Ok.
I will Describe my problem in detail, I have Client Server Application, The Application Is on The Server, For each user, I Create User_Name, Password and grant a user a role, such as inventory_Role, Customer_Role, Account_Role according to the user job, This role just contain the create session and some grants on the tables of the application, from three month ago, I write a post_Logon_Trigger on the database to Trace from where the user logon on the database, I Select AudSid, UserName, Program, Terminal, Machine, Program, OS_User From V_$Session and insert these data into a table I created.
From one week ago, when I was check the data in the this table, I discoverd that, there are other terminals for some users access the application with the user Bank_Acct, although I' am only one who use this User, and also no one knows the password of this users, I was mad, how these users know the password of the user Bank_Acct,
I Changed the Password of this user, and Also Password of all oracle default Accounts like SYS, SYSTEM, OUTLN, ...
I Use PLSQL Developer in my work, I Changed All These from My PC, And no one can access my PC, There is Poerful restriction on the network, In The Next day, When I was Check again the table contains the users who logged on the database, I found also, There is a terminal, not my terminal access the application with the user Bank_Acct, with the new Password, This means That, The user of this termainl would know the new password and access the application with the user Bank_Acct with the new Password.
I Don't Know how the user knew the New password without access the database or he didn't have the privileges to access the database outside the application.
I hope I Describe my problem , clearly, I hope you to help me.
Thank You
YasserM
Similar Messages
-
How to get the user password?
I want to get the user password.
How to do ?
Thank you.Hi Zhang,
You cannot see the password of an Authenticated User. You can retrieve the Password of the User in encrypted from using JNDI - by connecting to the OID & getting it. You can even change the password of the user with the necessary permissions - but, you cannot get the unencrpted password.
Regards,
Sandeep -
MDM How to know the user to check out
Hi,
How can we know the user that can "Join Check out" for an article in MDM?
We have some articles in grey and we don't know the user associated with it...
Thanks for answering.
Regards
MariaHi,
Please find below links which can solve your problems
http://help.sap.com/saphelp_nwmdm71/helpdata/en/4a/c909ec649e246fe10000000a42189c/content.htm
http://help.sap.com/saphelp_nwmdm71/helpdata/en/4b/134fe7bd166bb6e10000000a42189c/content.htm
Please let me know if your problem is not solved by this.
Thanks and Regards
Praful -
How to know the User name and date, who executed the report last time.
Hi All,
We are collecting a list of reports which are not executed for past 3 months. Can anybody tell me how to know the username and date they executed the report last time.
Is there any table to look ? or is there any process ?
Thanks,
Ravi.Ravi,
Use SE16 - then look at rszcompdir.
We look up Version = 13 for queries.
Regards
Gill -
How to reset the user password in Portal (SSO Users).
Hi,
How to let the Portal users (SSO Users) reset their passwords by themselves..?
- JForgot one another thing,
Assume that the users have set their required challenge questions (hints).
How does it work when the user forget his/her password. Is it like something below.
- click the "Forgot Password" link.
- Enter your id
- Answer your Hints.
Will the new password be emailed to you or you will be allowed access the system and then the user has to choose a new password.
Could you please shed light on this.
J. -
How to track the users password at insert page??
Hi all,
I need to create an interface, which allow users to upload some medical sequences into databse, also I need to alow the sequences's own to modify their input , in case they mske some mistake. now I need to deal with the following conditions.
1) Since the sequence's own need to take respone for their on sequence.
2)The interface has field call author,
3) before their do search edit or input , download , they need to log in the web set, any every one sure has their union password.
SO is that possible for me to get the log in password and check usere A is A to
avoid some one acciden or in poporse to use other s name to input or modify the sequence files in database .
Thank you11hello tmary,
hmm your problem seems to be a beginners problem?
well there are two points to help u accomplish ur aim.
1.the database tabel or users
2. the users username (which should be a primary key in the table)
now this is the flow.....
when the user logs in using the web login page u will create u check 4 his username and password existence in the database table for users,if it exist you direct him to the welcome page where he will have options of editing ,downloading,uploading,e.t.c
so when loading this page u put this authenticated username and password i the "session" object and make sure all ur pages are session enabled. now if thge user selects edit when loading the edit page u will use the user name in the session to get his correspondin record which will b from the database table of record in which the username should be foreignkey to now likewise u can do the same for the download ,upload,e.tc pages.
hope this helps ok.
please let me know if its not ok.
jlord1 -
How to know the SUPERDBA password or reset it
I am a complete newbie to SAP Netweaver Application server. We have upgraded our application server from 7.1 to 7.4. After the upgrade we are facing an issue, the database log is full.
To resolve this issue, we found a solution through dbmcli. Below are the steps to resolve the log is full issue.
Steps
1. dbmcli -d <database name> -u <username,password>
2. db_admin
3. util_connect
4. util_execute clear log
5. db_online
6. exit
All fine, but in the first step itself I am facing exception, because I am not sure of the database password. Below is my command and error message in detail
dbmcli -d J2E -u SUPERDBA,<mypassword entered here>
Error! Connection failed to node(local) for database J2E:
-24950, ERR_USRFAIL: User authorization failed.
Please help resolve this issue.This issue got resolved now. Password should be given in quotes if it has special characters in it.
Example:
dbmcli Syntax : dbmcli -d <databaseName> -u <username>,<password>
If your password = $123abc, and issuing the below command
dbmcli -d ABC -u srk,$123abc
will not work rather it shows you the error,
Error! Connection failed to node(local) for database J2E:
-24950, ERR_USRFAIL: User authorization failed.
The same will work if the password is given in quotes as shown below.
dbmcli -d ABC -u srk,'$123abc'
Thanks
Srk -
How can I know the user utility?
Dear all,
I know I can query "sys.v_$session" table to know the user login, but how can know the user utility like the process they are running etc??
Please advice,
AmyDo not use sys.v_$session, use v$session. Oracle doesn't guarantee the existence of the base tables.
For the rest, your question is a doc question.
You can issue
desc v$session
in sql*plus
or lookup the description for v$session in the Oracle Reference Manual for your version.
Doing this is way more efficient compared to asking volunteers to look up this info.
On the contrary, it demonstrates you are not prepared to do your own work.
Sybrand Bakker
Senior Oracle DDA -
Mod_ntlm/AD/LDAP How is the users password recovered and used.
I have an application that currently uses LDAP authenticationand authorisation based on a username and password derived from the page 101 login screen. I am trying to convert it to a SSO solution using mod_ntlm to retrieve authenticate the users windows login against Active Directory. I authenticate fine with a standard mod_ntlm page sentry letting me access the application and I can use the owa_util.get_cgi_env('remote_user') to get the username. What I haven't established is how to retrieve the users password to pass as a parameter into the existing LDAP authorisation functions.
I've based a lot of the ground work on the following article
http://withasmiletomeltathousandhearts.wordpress.com/2009/01/29/apex-windows-integrated-authentication/
However, this relies on a prestored LDAP_user and LDAP_Passwrd to retrieve data from AD. Rather than doing that I am trying to use the currently logged on user, whose login name I can retrieve but I have not found a way to retrieve and use their password?
What am I missing?
Thanks in advance
FunkyMonkyMy question is regarding how to use LDAP to retrieve the users AD group information. mod_ntlm has successfully authenticated the windows user to get into the application without having to login. I now want to implement the applications functionality based on that user's Active Directory groups. Prior to the ntlm solution this was done with using LDAP with the authorisation and the credentials were available from the user manually logging on.
The LDAP group determining method I referred to in my original post relies on a stored user to access the LDAP information rather than the actual logged in user as we had originally done it. Is this the only way we can implement our group based authorisation requirement?
Cheers
FunkyMonkey -
To know the user has roles for developer and administrator
Hi,
How to know the user id has roles SAP_XI_DEVELOPER and SAP_XI_ADMINISTRATOR?
Thanks.Hi,
Go to SE38. Execute report RSUSR002.
Enter the role SAP_XI_DEVELOPER and execute.
You will find out the list of users with the above role.
Your question was a little confusing. If you meant something else let us know.
Regards,
Sumit
Edited by: Sumit Khetawat on Jan 3, 2008 2:10 PM -
Question on how to Hide the User Name, Password, and Domain fields in the MDT Wizard
MDT 2012 U1
Deploying Windows 7 via Offline Media (ISO) to MS Virtual PC's
I am looking on how to Hide the User Name, Password, and Domain fields which are prepopulated in the MDT wizard via the CS.ini (Not so concerned about the Domain field as I am User Name and Password)
We do need the Computer Name and OU fields to be seen, so skipping the wizard is not a option
The client just does not want these fields to be seen by the end users, they dont want them to even know the account name used for adding the machine to the domain, of course the password is not displayed but it must not be displayed either.
But since we use the fields they must still be fuctional just not seen.
Thanks.....
If this post is helpful please click "Mark for answer", thanks! Kind regardsYou shouldn't have to edit DeployWiz_Definition_ENU.xml. You should only need to add "SkipAdminPassword=YES" to the CS.ini file and your authentication information.
Example:
[Settings]
Priority=Default
Properties=MyCustomProperty
[Default]
OSInstall=Y
SkipCapture=NO
SkipAdminPassword=YES
UserID=<MyUserID>
UserPassword=<MyPassword>
UserDomain=<MyDomain.com>
SkipProductKey=NO
SkipComputerBackup=YES
SkipBitLocker=NO
-Nick O.
Nick,
SkipAdminPassword=YES is for:
You can skip the Administrator Password wizard page by using this property in the
customsettings.ini.
I am hidding the Username/Password/and domain field in the computer name Wizard pane which is read from the cs.iniDomainAdmin=xxxxx
DomainAdminPassword=xxxxx
DomainAdminDomain=xxxxxx
JoinDomain=xxxxxx
If this post is helpful please click "Mark for answer", thanks! Kind regards -
How can I change my icloud account without knowing the old password
How can I change my icloud account on my phone when I don't know the old password and I'm on a shared plan
iCloud has nothing to do with your shared plan.
Try
https://iforgot.apple.com -
How to Restrict the users in oracle applications
Hi,
I want to Restrict the users in oracle applications without using database
can any one please expalin me how to resttrict the users using middletier
Thanks
GitaHI srini ,
my application version 12.0.4 and database is 10.2.0.4
and i want to restrict the No of users
exp i have have 500 users and i want restrict to 100 only
how can i do that please explain
Thanks,
Sudheer -
How do you reset your password if you dont know the current password
Does anyone know how to reset your password if you do not know the current password
If you have forgotten your Apple ID password: If you forgot your Apple ID password
If it's your iPhone passcode; then you need to do a restore: Forgot passcode for your iPhone, iPad, or iPod touch, or your device is disabled -
How to get the users list that can Add/Remove or modify Vendors in Oracle?
How to get the users list that can Add/Remove or modify Vendors in Oracle?
I need to generate a report like name and responsibility. ThanksThat query gives the Supplier information.
But what i would be needing is to find out the USERS in oracle who can Add/Modify or Remove Vendors.
I assume it should be based on the Responsibility.
Maybe you are looking for
-
Hi! Im from Finland, so this text is translated by Google Translate and me... Could you help me with the printing problem ? I have Windows 7 and the LaserJet 1020 . I would like to print email from Gmail , but when I press the print button in Gmail ,
-
How can i get the user that has created a document
I only need to know wich user has created a document(purchase order). For example, if user SALES1 creates a purchase order(100),in wich table/field is stored this information?(that tells me that user SALES1 has created purchase order 100). Thanks in
-
Acrobat Pro 9 is not compatible with Windows 7
Acrobat Pro 9 is not compatible with Windows 7. How do I upgrade my version? Thanks, John
-
Exception handling in CE Visual Composer 7.1
Hi, I have modeled a CAF Business Object and a custom Find operation which looks for a custom key. After that, I have exposed that operation as Web service and consumed it in Visual Composer. It is working perfectly as long as the search key exists i
-
Hi, Is there any standerd report available for purchasing documents release status by authorised person (for PO, PR & RFQ). If different level of authorizations are there than it should show howmany are released and whom to be release yet. RB