I have a problem where our developers would like to change the passwords of the SQL Logins without knowing the users old password.
The only way they can use the below syntax is that they must be a member of the SYSAdmin Server Role.
sp_password NULL, 'newpassword',Max
I need a way to allow them to change the passwords without making a user a member of the SYSAdmin Server Role.
Any thoughts would be greatly apprecitated. Thanks in advance.
Max
Using SQL Server 2005 SP2 std edition on Windows 2003 R2 SP2 x64 std edition I'm allowed to break the password policy.
To reproduce this behaviour as a system administrator run...
create login testuser with password='p'
This creates a login with the default of POLICY enabled ('Enforce Password Policy' check box is checked). OK, so may be system administrator is allowed to break the policy but now login as testuser and run
alter login testuser with password='t' old_password='p'
This succeeds despite obviously breaking the policy.
Surely this can't be right, I must be doing something wrong.
Any help will be greatly appreciated.
Tim Gordon-Jones
Users were able tolog on to our SQL 2000 servers with their passwords being case-insensitive.
Now with SQL 2005 some users can't logon because SQL 2005 passwords are case-sensitive.
Can SQL 2005 be configured so that passwords are NOT case sensitive???
Thanks!
Is there a way I can enable my end users to change
their own passwords within SQL 6.5 every 30 days to
something unique?
Currently, I don't see that they have the option to change
it anywhere.
Any thoughts?
Thanks!
Toni
I have to create some type of an sp that will force users to change
their passwords every 30 days. It sounds like I should be able to
create a simple table with the login and the password expiration date.
Then, I should create some type of function to check the expiration, get
the new password and run sp_password. Has anyone done this before?
Where would this table be created? In Master? Would that also be where
I should create this sp? Should this be an xp?
I'm fairly light on creating sp's. Can anyone suggest a starting point
for me or give any suggestions?
I would appreciate any help.
Thanks!
Toni E.
Does some one know of a way to use windows passwords in sql w/o having to enter them in? Like a program or sql statement?
As of now, we are having to enter them in ourselves , and would like to make our jobs easier....Thanks!!
hey guyz
in the database, is there anyway to chnage the password field to * instead of showing what is inside?
Hi
I have SQL Server 2000 and in one of the databases we store the Application passwords as a Clear text. we would like to encrypt
these passwords so that we will pass the auditing.
Can some one please suggest a good way to encrypt these passwords.
Thanks
for example i will set the password as chicken
http://img515.imageshack.us/my.php?image=chickenqs6.gif
then i press ok and it seems like it works i open it right away and
http://img295.imageshack.us/my.php?image=notchickenao0.gif
^^clearly not chicken......
then,ontop of that when i open the login name is a query script its some 15 character password that everytime u open in script the code changes..
http://img401.imageshack.us/my.php?image=screenhunter04jan062317zu0.gif
any help would be greatly appreciated
I have a pgp file requiring a password that is emailed to me. Is it possible to set up a DTS package that will open the file (using the password), and insert the data into a table, file, etc.
TB
Hello,
Is there a way to pull user id's and passwords from a database?
TIA,
Anita
Hello all,
Is there anyway to tell in sqlserver when a users' password has been changed?
Is there a way that I can prevent SQL Authenticated users from changing their passwords?
View 6 Replies View RelatedHi All,
Sql server 7
There are set of logins in sql server some are NT authentication and some are sql server authentication. How can i retrieve the passwords for both these logins.
TIA
Adil
How can we change the passwords of users in 2005 and in 2000
View 2 Replies View Relatedi have been reading many asp.net books
where is a good place to hold user name and password while the user is on your side in a cookie or applicaion user variable?
and if the user closes the navigator..what command removes the log in information ?
A friend of my self asked me how he can save a password not as clear text. He wanted to encrypt the password and save the encrypted string in the database.
How can he do this? Maybe somebody can help me here.
Regards Markus
I have installed Sql Server 2000 Reporting Services.
I desinged report in VS 2003.When press F5 key.Every time it is asking for user id password then only it is giving List of Report Names.
Is there any way to avoid giving user id and pwd every time.
Regards.
I'm looking for a way to upgrade the passwords of all users in a database every 10 days.
What I have is, generating random passwords, md5 encryption etc... but still clueless about how I should update em every 10 days.
Thanks in advance
Hello,
I have a simple .NET page that asks the user to create a new account. One of the fields on that page is 'Password'. I store the password in a SQL 2000 Database. However, it appears in the database as clear-text.
Is there a way to encrypt this so it doesn't appear as clear-text in the DB?
Thanks!
Jason
Wondering on how to script over the passwords from one 2000 box to another. We are cutting a box over from dev to production and need to copy userids and passwords from another box.
Any suggestions?
Thanks,
Steve
Hi,
WE are moving one of our applications to oracle from sql server.For this migration is there any way I can move passwords from sql server syslogins table to oracle or extract the passwords.
thanks in advance
Mohan
I'm running SQL 70 SP 3 on Nt4.
We store passwords of users of our website. They need to be autenticated and based on that it gives them access to what they are entitled. But its not like NT or server authentication.
This has been setup so that we have a user table and it stores the password. However, it stores it in plain text. Is there any way I can encrypt this field so it is unreadable? Is there a property or a datatype that I can't find? Is there a way to simulate the encryption?
Any ideas or help are appreciated.
Thanks
Kelsey
Is it possible in SQL Server 7.0 sp1 to have a
password that is case-sensitive on a case-insensitive
installation of SQL server?
Toni
Hi,
I want to delete N number of logins today and restore them 5 days later.
What steps should be done beside backup of master.
what whould be the way to restore logins with passwords (with or without permissions )without restoring master?
I gess just running sp_resolve_logins
will not help.
thank you
Alex
How do I generate a script of my users logins and passwords?
View 2 Replies View RelatedHi,
Can anybody tell me is it possible to view user passwords in SQL Server v6.5 as the syslogins table shows the passwords as encrypted.
Thanks,
Phil
Does anyone have a script or tip on how to move passwords associated with logins. I am consolidating two 6.5s into one and want to maintain the passwords associated with the logins. Any hints?
View 2 Replies View RelatedHello,
I am creating a new sql server 2000 machine and was wondering how to get the users and passwords from the sql6.5 box over onto the new machine. I know for sql 6.5 there is a stored proc sp_TransferPasswords that I have used but it will not script over cleanly to the sql 2000 box.
Thanks,
Steve
Hello, there this is my first post and Iīm desperate seeking for help, I have almost not knowledge of SQL as it is not my usual work.
However, suddenly it has converted in mine....Hopefully I will got help in here.
Well the issue is that our database manager has resigned suddenly and before doing it he has changed the passwords of all the users in
our database of a monitoring web application. So all our users have no access now to the application. After many tryouts I finally got
access to the database and to the users table. However I have the issue that the passwords looks as below showed and I donīt know what
the real password is.
I have tried to decrypt using web decrypting pages as it looks like normal base64 strings, but it returns weird stuff. Also as I donīt
know the real encryption used I canīt change to a know string. So if some could help me getting how it was encrypted or better to find
out the real passwords it will be truly appreciated. If it is needed more info please tell me so I can send it to you, or if you need the
database itself I can send you a backup.
Best Regards to everyone.
Quote:
NumberUSERNAMEPassword
11***uFHNaI0yloE=
22***uQ7f4zrS+I8=
33***vZLMcLSYGgU=
44***X1huNktKxiE=
55***Xj7X/j7IJlY=
66***xnjJfMyiK24=
77***YcQhuzE8ZKM=
88***yPkatR/yu34=
99***Z/+ujjLnAPI=
1010***Z/+ujjLnAPI=
1111***/E4vCqpZ0HWGa5akKPfeGg==
1212***+/IkfCripBiyGKX+0BOq5Q==
1313***+wv6aVBpAdoaVOIop5k7hA==
1414***0Xn9c0+SZLfFS+jEYqBUuQ==
1515***1CvLvdtfMemipN6agFOUcw==
1616***1YVYxTctsZlar9Vv7btVTw==
1717***4PVwBey0bOkwC3NA183F5g==
1818***5thrQN8LxHNhaMr4RJz1Bg==
1919***6qk+WBaRa9+GiOdvR5pEjw==
Hi,
I usually work with MySQL where it is able tl encrypt a password in a database (for users /clients etc) is there a way to do somthing similar in access.
Thanking you in advance
Oli
I'm a bit flummoxed on this one (doesn't take much these days). We have a test SQL database and a prod SQL database configured with the same user name and a complex password.
The password consists of letters and numbers, mixed upper and lower.
What I am seeing, however, is that SQL will permit access even if the user gets the case wrong on the letters. One letter, two letters, all letters. It doesn't matter.
I thought SQL passwords were case sensitive; was I wrong?
Regards,
hmscott
Edit: I should add that I am running SQL 2000, SP3a (hotfix 0818) on Windows 2000 SP4 and that SQL is clustered on two servers in Active/Passive mode (this applies to both Test and Prod).
HI, How to save passwords in sql server server 2000, i mean i builddatabase that consist table of user , in this table i want to storageuser's details including their passwords. As i understand it's not goodidea to storage password like other data i mean name , last name.How to accomplish this???--Message posted via http://www.sqlmonster.com
View 1 Replies View Related