jdbc thin driver password encryption

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

thierrydagnino@gmail.com - 17 Jan 2008 22:14 GMT

Hi,

I am connecting from websphere to oracle 10G using jdbc thin client.
Oracle does not have advanced encryption installed.

Is it possible to have the user pwd used by the driver encrypted when
we don't have the advanced encryption package installed ?

Thank you

Reply to this Message

Laurenz Albe - 18 Jan 2008 08:06 GMT

> I am connecting from websphere to oracle 10G using jdbc thin client.
> Oracle does not have advanced encryption installed.
>
> Is it possible to have the user pwd used by the driver encrypted when
> we don't have the advanced encryption package installed ?

Not that I know of.

That's what Oracle Advanced Security is for.
Is it the license fee that keeps you from using it?

Yours,
Laurenz Albe

Reply to this Message

thierrydagnino@gmail.com - 18 Jan 2008 17:39 GMT

> thierrydagn...@gmail.com wrote:
> > I am connecting from websphere to oracle 10G using jdbc thin client.
[quoted text clipped - 10 lines]
> Yours,
> Laurenz Albe

Yes.

Reply to this Message

Frank van Bortel - 18 Jan 2008 09:14 GMT

> Hi,
>
[quoted text clipped - 5 lines]
>
> Thank you

Are you sure your password is not encrypted?
Do you use the o3logon method?
Ref:
http://download.oracle.com/docs/cd/B19306_01/network.102/b14268/asojbdc.htm#sthref335

Signature

Regards,
Frank van Bortel

Top-posting in UseNet newsgroups is one way to shut me up

Reply to this Message

thierrydagnino@gmail.com - 18 Jan 2008 17:39 GMT

> thierrydagn...@gmail.com wrote:
> > Hi,
[quoted text clipped - 16 lines]
>
> Top-posting in UseNet newsgroups is one way to shut me up

I beleive the o3logon method is only available if using the advanced
encryption package.

Is it not ?

Reply to this Message

Frank van Bortel - 18 Jan 2008 18:09 GMT

>> thierrydagn...@gmail.com wrote:
>>> Hi,
[quoted text clipped - 17 lines]
>
> Is it not ?

No - because thin jdbc does not support any.

Did you not even simply click on the link above?!?

Signature

Regards,
Frank van Bortel

Top-posting in UseNet newsgroups is one way to shut me up

Reply to this Message

thierrydagnino@gmail.com - 30 Jan 2008 14:15 GMT

> thierrydagn...@gmail.com wrote:
> >> thierrydagn...@gmail.com wrote:
[quoted text clipped - 31 lines]
>
> - Afficher le texte des messages précédents -

I did click on the link. I read it several times. It talks about
encrypting content... not credentials if I am not mistaking.

Anyways, thanks for your help.

Reply to this Message

Frank van Bortel - 31 Jan 2008 18:57 GMT

>> thierrydagn...@gmail.com wrote:
>>>> thierrydagn...@gmail.com wrote:
[quoted text clipped - 31 lines]
>
> Anyways, thanks for your help.

Oracle always stores hashed (there tends to be misunderstanding about
encryption - I, for one, assume encryption is two ways, hashing
is one way, and therefor more secure).

I understood the question as "the network traffic needs to be encrypted"
and responded to that.

Signature

Regards,
Frank van Bortel

Top-posting in UseNet newsgroups is one way to shut me up

Reply to this Message