Built-in database password mechanism (was: Re: [jira] Commented: (DERBY-1387) Add JMX extensions to Derby)

["John H. Embretsen" <Jo...@Sun.COM>]

Dag H. Wanvik wrote:
> "Daniel John Debrunner (JIRA)" <ji...@apache.org> writes:
> 
>>     [ https://issues.apache.org/jira/browse/DERBY-1387?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12520325 ] 
>>
>> Daniel John Debrunner commented on DERBY-1387:
>> ----------------------------------------------
>>
>> Rick> So if the DBA uses system procedures to read the passwords, hashed values come back. 
>>
>> I don't think so. I think NULL will be returned for a password
>> lookup using the get database property method.
> 
> I tried this and it does seem to return the hash value, but maybe I
> slipped on something?

Is there any information on this in the manuals? If there is, I wasn't 
able to find it before running out of patience...

If I was a Derby DBA, I would most certainly be interested in more 
details on how passwords are stored in the database, including which 
hashing algorithm is being used.


-- 
John