It would be great if there were a query such as the following:
SELECT user,password FROM dual; USER PASSWORD ----- --------- SYS change_meUnfortunately, while the 'user' psuedo-column exists in the above query, the 'password' psuedo-column does not.
You can query DBA_USERS to see the encrypted forms of everyone's passwords. But the encryption form does not help you. Furthermore, the encryption algorithm that Oracle uses is a one-way hash. This means that there is no way to decrypt the password.
The bottom line is that you cannot find out what a password is once it has been set. The default password for SYS is 'change_on_install'. But it is highly likely that the person who created the database has changed the password to something else (at least I hope so). Your only alternative is to then change the SYS password to something that you know. Anyone with DBA privileges, like INTERNAL or SYSTEM, can change anyone else's password.
For More Information
- Dozens more answers to tough Oracle questions from Brian Peasland are available.
- The Best Oracle Web Links: tips, tutorials, scripts, and more.
- Have an Oracle or SQL tip to offer your fellow DBAs and developers? The best tips submitted will receive a cool prize. Submit your tip today!
- Ask your technical Oracle and SQL questions -- or help out your peers by answering them -- in our live discussion forums.
- Ask the Experts yourself: Our SQL, database design, Oracle, SQL Server, DB2, metadata, object-oriented and data warehousing gurus are waiting to answer your toughest questions.
This was first published in July 2002