Subject | RE: [firebird-support] Customising Security database 1 |
---|---|
Author | Alan McDonald |
Post date | 2004-12-14T11:24:16Z |
> >there is nothing stopping you from getting the encryptedRead this link
> password back from
> >the security database.
> >
> >
> How to do it ? , I will repeat : I am logged in remotely, via alias,
> dont know where is security.fdb. I am logged in as sysdba. How can I
> exctract my pwd insql SP ?
http://www.volny.cz/iprenosil/interbase/ip_ib_users.htm
The servicesAPI will tell you where the security database is.
e.g. IBO IB_Session has GetISC4Path method - any logged in user can retrieve
the security db path.
Once you have the path, connect to it and select passwd from users where
user_name='SYSDBA'
Now you have an encrypted password.
Use the encrypt UDF to encrypt your current password and do the match =
voila!
I can't tell you how to break the encrypted password (decrypt it) I don't
know how or want to know.
Alan
>
> >You will need to decrypt it.
> >Brute force? or as you suggest encrypt your known password and
> check for a
> >match.
> >
> >
> IF (DBPWD = ENCRYPT(MYPWD)) THEN .....
>
> >Alan