ORACLE erp 用户密码加密算法

纵横四海

http://www.itpub.net/514216.html
这是ITPub的原帖，因为要使用，所以归纳到这里了。

哪位知道ORACLE ERP用户密码加密算法的程序,如何调用?

有使用过的吗?

1. 
   
2. 你看看这个程序包
   
3. FND_WEB_SEC
   
4. 
   
5. 这个程序包里有个encycle 和 decycle的过程 是用来加密和解密的
   
6. 程序 但是调用JAVA的程序 你可以把这个JAVA程序找出来 反
   
7. 编译一下就可以看到这个算法了 还是比较复杂的。
   
8. 
   
9. 不过你可以直接调用他的程序就好了。
   
10. 
    

复制代码

1. 
   
2. 我知道这个,fnd_web_sec.validate_login(P_USER,P_PASSWORD)返回:Y/N,可以知道用户密码是否正确,可是如何调用它的加密程序?
   
3. 如:我输入密码:123456,返回的字符是加密后的.
   
4. 还可以调用解密程序,将那一长串的字符再返回用户的真实密码.不知道有没有这样的PKG?

复制代码

1. 
   
2. DECLARE
   
3. v_encrypted_pwd VARCHAR2 (200);
   
4. v_apps_pwd VARCHAR2 (100);
   
5. v_user_pwd VARCHAR (100);
   
6. BEGIN
   
7. v_encrypted_pwd :='ZG9866246E52A5FA57312543631C858618F1A357EAFC451B6ECDF013E7D7ADB23889599020EFD5BAEE2D848AAAA55C08DD7F';
   
8. --get ENCRYPTED_USER_PASSWORD from fnd_user
   
9. IF v_apps_pwd IS NULL THEN
   
10. v_apps_pwd := 'APS123C';
    
11. END IF;
    
12. v_user_pwd := XX_JOODHAWK_TEST_PKG.getpwd (v_apps_pwd, v_encrypted_pwd);
    
13. DBMS_OUTPUT.put_line (v_user_pwd);
    
14. END;
    

复制代码

-- Function to encrypt a string using a specified key.

function encrypt(key in varchar2, value in varchar2)
return varchar2
as language java name 'oracle.apps.fnd.security.WebSessionManagerProc.encrypt(java.lang.String,java.lang.String) return java.lang.String';


-- Function to decrypt an encrypted string using a specified key.

function decrypt(key in varchar2, value in varchar2)
return varchar2
as language java name 'oracle.apps.fnd.security.WebSessionManagerProc.decrypt(java.lang.String,java.lang.String) return java.lang.String';


__________________
MSN: kmljq_2004@hotmail.com
QQ: 353709159

纵横四海

这是包FND_WEB_SEC的描述，修改密码用：
FUNCTION change_password(p_user     IN VARCHAR2,
                           p_old_pwd  IN VARCHAR2,
                           p_new_pwd1 IN VARCHAR2,
                           p_new_pwd2 IN VARCHAR2) RETURN VARCHAR2;

  -- Changes the password of an applications user without verifying
  -- the existing pasword.  Returns 'Y' on success and 'N' on failure.

  FUNCTION change_password(p_user IN VARCHAR2, p_new_pwd IN VARCHAR2)

1. 
   
2. 
   
3. CREATE OR REPLACE PACKAGE fnd_web_sec AUTHID CURRENT_USER AS
   
4.   /* $Header: AFSCJAVS.pls 115.27 2004/12/15 23:13:08 mskees ship $ */
   
5. 
   
6.   /*
   
7.   * Validate_login
   
8.   *   Test a username and password without updating audit tables.
   
9.   *   Only use this api to authenticate a user password when you do not
   
10.   *   expect that user to login or create a session.
    
11.   *
    
12.   *   NOTE: This api only works for LOCAL users (i.e., for users who are
    
13.   *   not SSO enabled.)
    
14.   * IN
    
15.   *   p_user - username
    
16.   *   p_password - password
    
17.   * RETURNS
    
18.   *   'Y' if user/password is valid, 'N' if not
    
19.   * RAISES
    
20.   *   Never raises exceptions, returns 'N' with a message on the
    
21.   *   message stack if an error is encountered.
    
22.   */
    
23.   FUNCTION validate_login(p_user IN VARCHAR2, p_pwd IN VARCHAR2)
    
24.     return VARCHAR2;
    
25. 
    
26.   /*
    
27.   * Validate_login
    
28.   *   Validate a username and password, and update audit tables with
    
29.   *   results. Use this api if the user is expected to login.
    
30.   *
    
31.   *   NOTE: This api only works for LOCAL users (i.e., for users who are
    
32.   *   not SSO enabled.)
    
33.   * IN
    
34.   *   p_user - username
    
35.   *   p_password - password
    
36.   *   p_loginfrom - flag indicating a login UI was used for access
    
37.   * OUT
    
38.   *   p_loginID - Login ID of audit record (if successful)
    
39.   *   p_expired - Expiration flag to check whether user's password has expired.
    
40.   * RETURNS
    
41.   *   'Y' if user/password is valid, 'N' if not
    
42.   * RAISES
    
43.   *   Never raises exceptions, returns 'N' with a message on the
    
44.   *   message stack if an error is encountered.
    
45.   */
    
46.   FUNCTION validate_login(p_user      IN VARCHAR2,
    
47.                           p_pwd       IN VARCHAR2,
    
48.                           p_loginID   OUT nocopy NUMBER,
    
49.                           p_expired   OUT nocopy VARCHAR2,
    
50.                           p_loginfrom IN VARCHAR2 default null)
    
51.     return VARCHAR2;
    
52. 
    
53.   /* This procedure logs an unsuccessful_login attempt which would normally come from
    
54.   * FUNCTION validate_login(p_user       IN VARCHAR2,
    
55.   *                           p_pwd      IN VARCHAR2,
    
56.   *                           p_loginID OUT NUMBER,
    
57.   *                           p_expired OUT VARCHAR2)
    
58.   */
    
59.   PROCEDURE unsuccessful_login(userID IN NUMBER);
    
60. 
    
61.   -- Creates a new application user in the FND_USER table.
    
62.   -- Returns 'Y' on success and 'N' on failure.
    
63.   -- If successful, returns the new user_id.
    
64. 
    
65.   FUNCTION create_user(p_user    IN VARCHAR2,
    
66.                        p_pwd     IN VARCHAR2,
    
67.                        p_user_id OUT nocopy NUMBER) RETURN VARCHAR2;
    
68. 
    
69.   -- Changes the password of an applications user after verifying
    
70.   -- the existing pasword.  Returns 'Y' on success and 'N' on failure.
    
71. 
    
72.   FUNCTION change_password(p_user     IN VARCHAR2,
    
73.                            p_old_pwd  IN VARCHAR2,
    
74.                            p_new_pwd1 IN VARCHAR2,
    
75.                            p_new_pwd2 IN VARCHAR2) RETURN VARCHAR2;
    
76. 
    
77.   -- Changes the password of an applications user without verifying
    
78.   -- the existing pasword.  Returns 'Y' on success and 'N' on failure.
    
79. 
    
80.   FUNCTION change_password(p_user IN VARCHAR2, p_new_pwd IN VARCHAR2)
    
81.   
    
82.    RETURN VARCHAR2;
    
83. 
    
84.   -- Changes the password of an existing " web user" - previously
    
85.   -- in fnd_web_user table. For Internal use only.
    
86. 
    
87.   FUNCTION upgrade_web_password(p_user        IN VARCHAR2,
    
88.                                 p_enc_web_pwd IN VARCHAR2,
    
89.                                 p_new_pwd     IN VARCHAR2) RETURN VARCHAR2;
    
90. 
    
91.   -- Validates a user's password.
    
92. 
    
93.   function validate_password(username in varchar2, password in varchar2)
    
94.     return varchar2;
    
95. 
    
96.   -- Updates entries in FND_USER_PREFERENCES that support the
    
97.   -- "no reuse within X days" password validation feature.
    
98. 
    
99.   procedure update_no_reuse(username in varchar2, password in varchar2);
    
100. 
     
101.   -- Return user password encrypted with new key
     
102.   --  If mode = 'OID' then uses an algorithm that OID can decrypt on their end
     
103.   function get_reencrypted_password(username in varchar2,
     
104.                                     new_key  in varchar2,
     
105.                                     p_mode   in varchar2 default null)
     
106.     return varchar2;
     
107. 
     
108.   -- Set user password from value returned from get_reencrypted_password
     
109.   function set_reencrypted_password(username in varchar2,
     
110.                                     reencpwd varchar2,
     
111.                                     new_key  in varchar2) return varchar2;
     
112. 
     
113.   -- Return oracle user password decrypted. This is mainly used by
     
114.   -- FND_ORACLE_SCHEMA.GetSchemaPassword().
     
115.   function get_op_value(username in varchar2, applsyspwd in varchar2)
     
116.     return varchar2;
     
117. 
     
118.   -- Creates a new oracle user in the FND_ORACLE_USERID table.
     
119.   -- Returns 'Y' on success and 'N' on failure.
     
120.   -- If successful, returns the new user_id.
     
121. 
     
122.   FUNCTION create_oracle_user(p_user    IN VARCHAR2,
     
123.                               p_pwd     IN VARCHAR2,
     
124.                               p_newkey  IN VARCHAR2,
     
125.                               p_user_id OUT nocopy NUMBER) RETURN VARCHAR2;
     
126. 
     
127.   -- Return user password encrypted with new key
     
128.   function get_reencrypted_oracle_pwd(username in varchar2,
     
129.                                       new_key  in varchar2) return varchar2;
     
130. 
     
131.   -- Return user password converted from cur_key to right key for storing in db
     
132.   function cvt_reencrypted_oracle_pwd(pwd in varchar2, cur_key in varchar2)
     
133.     return varchar2;
     
134. 
     
135.   -- Use the given key to encrypt the given string by calling
     
136.   -- WebSessionManagERProc.encrypt().
     
137. 
     
138.   function encrypt(key in varchar2, value in varchar2) return varchar2;
     
139. 
     
140.   -- A different encryption routine, calls through to
     
141.   -- WebSessionManagerProc.URLEncrypt().
     
142. 
     
143.   function URLEncrypt(key in varchar2, value in varchar2) return varchar2;
     
144. 
     
145.   -- This routine is for AOL INTERNAL USE ONLY !!!!!!!
     
146.   -- Changes the password of the applications GUEST user without verifying
     
147.   -- the existing password.  Returns 'Y' on success and 'N' on failure.
     
148.   --
     
149.   -- bug 4051516 allow AdminAppServer to pass fnd pass as key to remove
     
150.   -- dependancy on the guest password being correct to reset it.
     
151.   -- Requires AFSCJAVB.pls 115.63 and AdminAppServer.java
     
152. 
     
153.   FUNCTION change_guest_password(p_new_pwd IN VARCHAR2,
     
154.                                  p_key     IN VARCHAR2 default NULL)
     
155.     RETURN VARCHAR2;
     
156. 
     
157.   -- bug 4047740 used by loader when creating a new user
     
158.   INVALID_PWD CONSTANT VARCHAR2(25) := '**FND_INVALID_PASSWORD**';
     
159. 
     
160. END FND_WEB_SEC;
     
161. 
     

复制代码

raybao

我试了一下,有些方法可以,有些不行,这是为什么?
一直return 'N' 而我又不知道为什么返回'N'

jetbo

一直在用，但不知道算法

dsp_chenfx

:/why

atomic79

嗯，研究一下

cleva

研究一下

yeling513521

不是很懂

jiang774256182

{:soso_e121:}