Database Security Products (MOSC)

MOSC Banner

Compare Oracle password hash string with openLDAP password hash string

edited Nov 3, 2019 4:00AM in Database Security Products (MOSC) 12 commentsAnswered

Hello,

From my 11.2 and 12.1 databases, I have to check if the oracle user password and the openLDAP directory password for the same user are the same, but the password value is unknown; so I will have to compare passwords hash strings.

From openLDAP directory, the ldapsearch command returns the following hash string for userpassword attribute:

e1NTSEF9b1dMZG43MGg5Sjc2dTdsQTVvWmdmcXpZa1ZuTmQyQjk= i.e. {SSHA}oWLdn70h9J76u7lA5oZgfqzYkVnNd2B9 after base64 decoding.

From Oracle database, I tested the following code (Oracle 11g Password algorithm revealed ):

14 DECLARE

15 lv_pwd_raw RAW(128);

16 lv_enc_raw RAW(2048);

17 lv_hash_found varchar2(300);

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center