Home/ Questions/Q 7850035
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-02T18:43:15+00:00

dba_users.Password contains hashed passwords. How can old password be verified before changing password? I

  • 0

dba_users.Password contains hashed passwords. How can old password be verified before changing password? I have rough idea about two methods:

(1) Find what hash algorithm and seed value oracle is using, then take hash and match hashes. This turns out to be very hard as oracle’s hash algorithm and seed are not publicly known.

(2) EXECUTE IMMEDIATE ‘CONNECT ‘ || p_UserName || ‘/’ || p_OldPassword. What issues do this approach have? How to close connection after this is executed, or do it automatically closed once the statement or procedure exits? Can the same user be login simultaneously multiple times under any scenario?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    The ALTER USER command has a REPLACE keyword that lets you specify the old password.

    • 0