{"id":10977,"date":"2018-02-22T15:33:01","date_gmt":"2018-02-22T14:33:01","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/"},"modified":"2018-02-22T15:33:01","modified_gmt":"2018-02-22T14:33:01","slug":"oda-12-2-1-2-0-some-curious-password-management-rules","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/","title":{"rendered":"ODA 12.2.1.2.0: Some curious password management rules"},"content":{"rendered":"

While deploying an ODA based on the DCS stack (odacli), it is mandatory to provide a “master” password at appliance creation. The web GUI provides for that a small tooltip which describes the rules applied on password management. However it looks like there is some flexibility with those rules. Lets try to check this out with some basics tests.<\/p>\n

<\/p>\n

First of all here are the rules as provided by the ODA interface:<\/p>\n

\"41-Web-CreateAppliance-PWDRules\"<\/a><\/p>\n

So basically it has to start with an alpha character and be at least 9 characters long. My first reaction was that 9 characters is not to bad even if 10 would be better as minimum. Unfortunately it is not requesting any additional complexity mixing uppercase, lowercase, numbers… My second reaction, as most of IT guys, was to try to not respect these rules and see what happen \ud83d\ude1b<\/p>\n

I started really basically by using an “high secured” password: test<\/p>\n

\"44-Web-CreateAppliance-PWD-test\"<\/a><\/p>\n

Perfect the ODA reacted as expect and tells me I should read the rules once again. Next step is try something a bit more complicated: manager<\/p>\n

..and don’t tell me you never used it in any Oracle environment \ud83d\ude09<\/p>\n

\"42-Web-CreateAppliance-PWD-manager\"<\/a><\/p>\n

Fine, manager is still not 9 character long, 7 indeed, and the installer is still complaining. For now, everything is okay.
\nNext step was to try a password respecting the rules of 9 characters: welcome123<\/p>\n

\"43-Web-CreateAppliance-PWD-welcome123\"<\/a><\/p>\n

Still a faultless reaction of ODA!<\/p>\n

Then I had the strange idea to test the historical ODA password: welcome1<\/p>\n

\"43-Web-CreateAppliance-PWD-welcome1\"<\/a><\/p>\n

Oops! The password starts with an alpha character fine, but if I’m right welcome1 is only 8 characters long \ud83d\ude15
\nIf you don’t believe me, try to count the dot on the picture above….and I swear I didn’t use Gimp to “adjust” it \ud83d\ude09<\/p>\n

Finally just to be sure I tried another password of 8 characters: welcome2<\/p>\n

\"43-Web-CreateAppliance-PWD-welcome2\"<\/a><\/p>\n

Ah looks better. This time the installer sees that the password is not long enough and shows a warning.<\/p>\n

…but would it mean that welcome1 is hard-coded somewhere??<\/p>\n

 <\/p>\n

Not matter, let’s continue and run the appliance creation with welcome123. Once done I try log using SSH to my brandly new created ODA using my new master password<\/p>\n

\"43-CreateAppliance-PWD-SSH-Login-\"<\/a><\/p>\n

it doesn’t work! \ud83d\ude2f<\/p>\n

I tried multiple combination from welcome123, welcome1, Welcome123 and much more. Unfortunately none of them work.
\nAt this point there are only 2 solutions to connect back to your ODA:<\/p>\n

    \n
  1. There is still a shell connected as root to the ODA and then the root password can easily be changed using passwd<\/li>\n
  2. No session is open to the ODA anymore and then it requires to open the remote console to reboot the ODA in Single User mode \ud83d\ude41<\/li>\n<\/ol>\n

    As the master password should be set to both root, grid and oracle users, I tried the password for grid and oracle too:<\/p>\n

    \"43-CreateAppliance-PWD-oracle-login\"<\/a><\/p>\n

    Same thing there the master password provided during the appliance creation hasn’t be set properly.<\/p>\n

    Hope it help!<\/p>\n","protected":false},"excerpt":{"rendered":"

    While deploying an ODA based on the DCS stack (odacli), it is mandatory to provide a “master” password at appliance creation. The web GUI provides for that a small tooltip which describes the rules applied on password management. However it looks like there is some flexibility with those rules. Lets try to check this out […]<\/p>\n","protected":false},"author":7,"featured_media":10978,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229,199],"tags":[656,23,1046,79,96,997],"type_dbi":[],"class_list":["post-10977","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-database-administration-monitoring","category-hardware-storage","tag-12-2","tag-dba","tag-engineered-system","tag-oda","tag-oracle","tag-password"],"acf":[],"yoast_head":"\nODA 12.2.1.2.0: Some curious password management rules - dbi Blog<\/title>\n<meta name=\"description\" content=\"ODA 12.2.1.2.0 is providing a password rule for setting the master password during deployment. However this rules is not fully respected as shown here.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ODA 12.2.1.2.0: Some curious password management rules\" \/>\n<meta property=\"og:description\" content=\"ODA 12.2.1.2.0 is providing a password rule for setting the master password during deployment. However this rules is not fully respected as shown here.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-22T14:33:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png\" \/>\n\t<meta property=\"og:image:width\" content=\"660\" \/>\n\t<meta property=\"og:image:height\" content=\"236\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"David Hueber\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Hueber\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/\"},\"author\":{\"name\":\"David Hueber\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/8873e20a98a02305870909f4e3d0088f\"},\"headline\":\"ODA 12.2.1.2.0: Some curious password management rules\",\"datePublished\":\"2018-02-22T14:33:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/\"},\"wordCount\":488,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png\",\"keywords\":[\"12.2\",\"DBA\",\"Engineered system\",\"ODA\",\"Oracle\",\"Password\"],\"articleSection\":[\"Database Administration & Monitoring\",\"Hardware & Storage\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/\",\"name\":\"ODA 12.2.1.2.0: Some curious password management rules - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png\",\"datePublished\":\"2018-02-22T14:33:01+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/8873e20a98a02305870909f4e3d0088f\"},\"description\":\"ODA 12.2.1.2.0 is providing a password rule for setting the master password during deployment. However this rules is not fully respected as shown here.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#primaryimage\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png\",\"contentUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png\",\"width\":660,\"height\":236},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ODA 12.2.1.2.0: Some curious password management rules\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/8873e20a98a02305870909f4e3d0088f\",\"name\":\"David Hueber\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/fc07284dbd5667f0bed32b0d8d64076ab885746973ea1b5c4e69c6fa7074cf59?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/fc07284dbd5667f0bed32b0d8d64076ab885746973ea1b5c4e69c6fa7074cf59?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/fc07284dbd5667f0bed32b0d8d64076ab885746973ea1b5c4e69c6fa7074cf59?s=96&d=mm&r=g\",\"caption\":\"David Hueber\"},\"description\":\"David Hueber has ten years of experience in infrastructure operation & management, engineering, and optimization. He is specialized in Oracle technologies (engineering, backup and recovery, high availability, etc.), Service Management standards and Oracle infrastructure operation processes (Service Desk, Change Management, Capacity Planning, etc.). David Hueber is ITILv3 Service Operation Lifecycle certified and Linux LPIC-1 certified. He received a university degree in Informatics and Networks at the IUT Mulhouse, France. He also studied Information Systems at the Conservatoire National des Arts et M\u00e9tiers in Mulhouse, France. His branch-related experience covers Financial Services \/ Banking, Chemicals & Pharmaceuticals, Transport & Logistics, Retail, Food, etc.\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/david-hueber\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"ODA 12.2.1.2.0: Some curious password management rules - dbi Blog","description":"ODA 12.2.1.2.0 is providing a password rule for setting the master password during deployment. However this rules is not fully respected as shown here.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/","og_locale":"en_US","og_type":"article","og_title":"ODA 12.2.1.2.0: Some curious password management rules","og_description":"ODA 12.2.1.2.0 is providing a password rule for setting the master password during deployment. However this rules is not fully respected as shown here.","og_url":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/","og_site_name":"dbi Blog","article_published_time":"2018-02-22T14:33:01+00:00","og_image":[{"width":660,"height":236,"url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png","type":"image\/png"}],"author":"David Hueber","twitter_card":"summary_large_image","twitter_misc":{"Written by":"David Hueber","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/"},"author":{"name":"David Hueber","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/8873e20a98a02305870909f4e3d0088f"},"headline":"ODA 12.2.1.2.0: Some curious password management rules","datePublished":"2018-02-22T14:33:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/"},"wordCount":488,"commentCount":0,"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png","keywords":["12.2","DBA","Engineered system","ODA","Oracle","Password"],"articleSection":["Database Administration & Monitoring","Hardware & Storage"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/","url":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/","name":"ODA 12.2.1.2.0: Some curious password management rules - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png","datePublished":"2018-02-22T14:33:01+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/8873e20a98a02305870909f4e3d0088f"},"description":"ODA 12.2.1.2.0 is providing a password rule for setting the master password during deployment. However this rules is not fully respected as shown here.","breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/41-Web-CreateAppliance-PWDRules.png","width":660,"height":236},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/oda-12-2-1-2-0-some-curious-password-management-rules\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"ODA 12.2.1.2.0: Some curious password management rules"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/8873e20a98a02305870909f4e3d0088f","name":"David Hueber","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fc07284dbd5667f0bed32b0d8d64076ab885746973ea1b5c4e69c6fa7074cf59?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fc07284dbd5667f0bed32b0d8d64076ab885746973ea1b5c4e69c6fa7074cf59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fc07284dbd5667f0bed32b0d8d64076ab885746973ea1b5c4e69c6fa7074cf59?s=96&d=mm&r=g","caption":"David Hueber"},"description":"David Hueber has ten years of experience in infrastructure operation & management, engineering, and optimization. He is specialized in Oracle technologies (engineering, backup and recovery, high availability, etc.), Service Management standards and Oracle infrastructure operation processes (Service Desk, Change Management, Capacity Planning, etc.). David Hueber is ITILv3 Service Operation Lifecycle certified and Linux LPIC-1 certified. He received a university degree in Informatics and Networks at the IUT Mulhouse, France. He also studied Information Systems at the Conservatoire National des Arts et M\u00e9tiers in Mulhouse, France. His branch-related experience covers Financial Services \/ Banking, Chemicals & Pharmaceuticals, Transport & Logistics, Retail, Food, etc.","url":"https:\/\/www.dbi-services.com\/blog\/author\/david-hueber\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/10977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=10977"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/10977\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media\/10978"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=10977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=10977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=10977"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=10977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}