Schema owner's password?

[E3p0]

Is there a way to figure out a schema owners password when it is not known? I know the system schema's password, but there is one schema we do not know the password for, and I do not want to change it in the event it is hard coded in a report or something. Help??


Never be afraid to ask for help!

 

[Turkbear]

Hi,
Since that is also that user's password, ask them for it..

If not then you are out of luck...As well you should be in a secure system - The DBA, obviously, can change it but if someone has foolishly hard-coded it in an app, the app will fail ( as you noted)..

 

[carp]

In which case it will quickly be apparent which application has the password hard-coded in it!
The trick will be to implement a non-hardcoded password method in that application.

 

[E3p0]

Thanks folks it is what I figured. They (FileNET software vendor) stated if I had changed the password I would have some problems, but they were able to provide me with the password. The person I spoke with couldn't tell me if it was hard coded or used a config file to refrence the schema's so I am waiting on another reply from them.

Thanks again

Never be afraid to ask for help!

 

[Turkbear]

Hi,
And if the hard-coded password is in the app's code, you may be able to read the password with any hex editor..

 

[DBAwhosaysNIE]

or you could do a google on "Oracle password crack" and find something like:

http://home.earthlink.net/~adamshalon/oracle_password_cracker/

I didn't actually download/test this but in principle it should be no different (other that Oracle's non-standard encryption) than any # of password crackers (ex. "John the ripper&quot for *nix or M$.