Database Security Products (MOSC)

MOSC Banner

How to find out if database user actually uses HTTP Digest Authentication

Hi!

I see "HTTP" listed under PASSWORD_VERSIONS in the DBA_USERS view on quite a few databases. I would like to disable HTTP Digest for security reasons, but I have a dilemma. I don't know if this is just a side product from the times when individual databases were on version 12.1 and this was the default option when creating a user, or maybe some users actually need HTTP Digest for their authentication. Is there any way (e.g. data dictionary views, audit trail, etc.) through which it would be possible to see whether the user has ever logged in this way (in

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center