tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Paul French <Paul.fre...@thetrainline.com>
Subject RE: Digested Passwords and Oracle 8.1.7
Date Tue, 22 Oct 2002 16:17:32 GMT
As far as I'm aware Oracle use their own propriety encryption algorithm and
do not provide any mechanism to encrypt a password so that you can compare
with passwords in the oracle data dictionary. I think the only answer is to
implement your own user/password functionality and encrypt the password
yourself using a standard algorithm.

Paul

-----Original Message-----
From: Graham Lounder [mailto:lounder@caris.com] 
Sent: 22 October 2002 13:35
To: Tomcat Users List
Subject: RE: Digested Passwords and Oracle 8.1.7

I need the algorithm so I can encrypt a password.  The Tomcat Realm would
then compare the encrypted password to the encrypted password in the
database.  I don't need to decrypt the password.

Graham

-----Original Message-----
From: Wagoner, Mark [mailto:MWagoner@wild-flavors.com]
Sent: October 22, 2002 9:32 AM
To: 'Tomcat Users List'
Subject: RE: Digested Passwords and Oracle 8.1.7


I don't think you are supposed to be able decrypt the passwords.  In fact, I
would hope that you can't or Oracle would have a big problem.

-----Original Message-----
From: Graham Lounder [mailto:lounder@caris.com]
Sent: Tuesday, October 22, 2002 8:28 AM
To: tomcat-user@jakarta.apache.org
Subject: Digested Passwords and Oracle 8.1.7


Hey all!

I was wondering if any has ever tried to use a Tomcat Realm directly to
Oracle's Username/Password table.

I found the table in SYSTEM.DBA_USERS which has the username and encrypted
password.  The problem is, I have no way of digesting the password.  Does
anyone know the algorithm Oracle uses to encrypted their passwords?  I've
checked MD5 and SHA but they don't seem to be it.  I tried MD2 but it Tomcat
doesn't seem to like it.

Any Ideas?

Thanks in advance,
Graham

============================================
  Graham Lounder
  Java Developer
  Spatial Components Division
  CARIS
  264 Rookwood Ave
  Fredericton NB E3B-2M2
  Office 506 462-4263
  Fax    506 459-3849
  graham.lounder@caris.com
  http://www.spatialcomponents.com
============================================


--
To unsubscribe, e-mail:
<mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail:
<mailto:tomcat-user-help@jakarta.apache.org>

--
To unsubscribe, e-mail:
<mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail:
<mailto:tomcat-user-help@jakarta.apache.org>


--
To unsubscribe, e-mail:
<mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail:
<mailto:tomcat-user-help@jakarta.apache.org>

--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@jakarta.apache.org>


Mime
View raw message