Database

Re: Case-Sensative Password Column in SQL Anywhere 10

24-Feb-10 9:24

That sounds perfect for what I'm looking for.

Do you have an example or a link?

Thanks

PIEBALDconsult24-Feb-10 14:19

PIEBALDconsult

24-Feb-10 14:19

Here are my hashing methods:

public static string
Hash
(
    string Subject
)
{
    return ( Hash 
    ( 
        System.Text.Encoding.Unicode.GetBytes ( Subject ) 
    , 
        new System.Security.Cryptography.SHA1Managed() 
    ) ) ;
}

public static string
Hash
(
    string                                     Subject
,
    System.Security.Cryptography.HashAlgorithm Provider
)
{
    return ( Hash 
    ( 
        System.Text.Encoding.Unicode.GetBytes ( Subject ) 
    , 
        Provider
    ) ) ;
}

public static string
Hash
(
    byte[] Subject
)
{
    return ( Hash 
    ( 
        Subject 
    , 
        new System.Security.Cryptography.SHA1Managed() 
    ) ) ;
}

public static string
Hash
(
    byte[]                                     Subject
,
    System.Security.Cryptography.HashAlgorithm Provider
)
{
    System.Text.StringBuilder result = 
        new System.Text.StringBuilder ( Provider.OutputBlockSize ) ;

    foreach 
    ( 
        byte b 
    in 
        Provider.ComputeHash ( Subject ) 
    )
    {
        result.Append ( b.ToString ( "X2" ) ) ;
    }

    return ( result.ToString() ) ;
}

Re: Case-Sensative Password Column in SQL Anywhere 10

WoutL24-Feb-10 10:28

Re: Case-Sensative Password Column in SQL Anywhere 10

24-Feb-10 10:28

How do you mean 'passwords should not be case-sensitive'. I think they should be! But your'e right about not storing them as clear text. They should be hashed indeed.

Wout Louwers

PIEBALDconsult24-Feb-10 14:10

PIEBALDconsult

24-Feb-10 14:10

Nothing in a user interface should be case-sensitive -- that's just my opinion after using OpenVMS for many years and then being thrown into Unix, Windows, VOS, etc. Dead | X|

Case-sensitivity is user-hostile; it does not serve the user.

Re: Case-Sensative Password Column in SQL Anywhere 10

WoutL24-Feb-10 19:50

Re: Case-Sensative Password Column in SQL Anywhere 10

24-Feb-10 19:50

I never worked with Open-VMS. I think case-sensitve passwords are better for security.

Wout Louwers

David Skelly24-Feb-10 22:46

David Skelly

24-Feb-10 22:46

PIEBALDconsult wrote:
Passwords should not be case-sensitive

I'm glad you're not in charge of security at my bank.

I agree with the suggestion to hash the password in the database. However, be aware that the US Goverment has said that all federal applications should stop using SHA-1 as soon as practical as it is considered too weak and several authors have published attacks which exploit weaknesses in the algorithm.

Re: Case-Sensative Password Column in SQL Anywhere 10

MWRivera25-Feb-10 3:51

Re: Case-Sensative Password Column in SQL Anywhere 10

25-Feb-10 3:51

Thanks for the feedback guys.

After some discussion it's been asked of me to find out if there is any way of setting the actual column in the database up as a password column in some way. Is there any contraint/switch in sybase that will serve what I'm looking for?

Thanks again

David Skelly25-Feb-10 6:14

David Skelly

25-Feb-10 6:14

MWRivera wrote:
setting the actual column in the database up as a password column in some way

I'm not sure what you mean by this. Maybe this article will be of help:

http://ianywheresolutions.net/developer/product_manuals/sqlanywhere/1000/en/html/dbdaen10/da-security-s-4649816.html[^]

This obviously leaves you with the problem of how to secure the key used to encrypt and decrypt the password; I for one don't much like the idea of hard-coding it into the trigger like this. But it's a start.

This is for SQLAnywhere, which I think you said you were using. If it is Sybase ASE there is a more sophisticated method for doing this sort of thing which is explained in the documentation.

Re: Case-Sensative Password Column in SQL Anywhere 10

MWRivera25-Feb-10 6:27

Re: Case-Sensative Password Column in SQL Anywhere 10

25-Feb-10 6:27

Thanks for the link David, I'll check it out at the next opertunity I get.

Mel

MWRivera3-Mar-10 4:37

SSIS Connection Problem in C#

3-Mar-10 4:37

Hi David,

Thanks for the link above. I was wondering if you or anyone else could help with a problem I've came into with it though.

I was able to encrypt the password field using the following trigger when a new record was added to the table:

ALTER TRIGGER "encrypt_new_user_pwd" BEFORE INSERT
ORDER 1 ON "QAS"."tableName"
REFERENCING NEW AS newPwd
FOR EACH ROW
BEGIN
Set newPwd.pwdField = ENCRYPT(newPwd.pwdField , 'key')
END

The problem is I'm unable to decrypt the password of the newly created record (fieldID = 0002), using the following:

SELECT CAST (DECRYPT(pwdField, 'key') AS VARCHAR(100))
FROM "QAS"."tableName" WHERE fieldID = '0002'

In Sybase when trying to execute the above statement I get the following error:

Interactive SQL
The following error occurred while fetching results:
Decryption error: Input must be a multiple of 16 bytes in length for AES
SQLCODE=-851, ODBC 3 State="08001"

Do you have any idea what is going wrong here?

The pwdField is of type VARCHAR and size 15.

Thanks,
Mel

Oracle Primary key

MsmVc24-Feb-10 0:01

MsmVc

24-Feb-10 0:01

Hi all
how can i get Primary key column name from table?I find some tips from google but it's not working always show no row selected.

select all_constraints.index_name, all_ind_columns.column_name, all_ind_columns.column_position from all_constraints, all_ind_columns where all_constraints.owner = all_ind_columns.index_owner and all_constraints.constraint_name = all_ind_columns.index_name and all_constraints.constraint_type = 'P' and all_constraints.owner = 'DBO' and all_constraints.table_name = UPPER('VARTABLE') order by all_constraints.index_name asc, all_ind_columns.column_position asc, all_ind_columns.column_name asc

please help me.

Re: Oracle Primary key

Mycroft Holmes24-Feb-10 0:50

Mycroft Holmes

24-Feb-10 0:50

try hitting the enter key sometime!

Never underestimate the power of human stupidity
RAH

Re: Oracle Primary key

MsmVc24-Feb-10 0:52

MsmVc

24-Feb-10 0:52

ok next time.

Re: Oracle Primary key

David Skelly24-Feb-10 1:57

David Skelly

24-Feb-10 1:57

Try this:

http://www.techonthenet.com/oracle/questions/find_pkeys.php[^]

Vimalsoft(Pty) Ltd23-Feb-10 20:15

Vimalsoft(Pty) Ltd

23-Feb-10 20:15

Goood Day All

I have a SSIS package that i have created and i want to execute in C# in my web Application. and i have a Connection manager named "OMEGA" and in my C# am trying to execute it like this

//Start the SSIS Here
Application app = new Application();
Package package = null;
package = app.LoadPackage(@"C:\O!WEB_SETUP_VERSIONS\SSIS_Compiled\OMEGA.dtsx", null);
Variables vars = package.Variables;
vars["Time1"].Value = time;
vars["Time2"].Value = time;
vars["Time3"].Value = time;
vars["TTBLTYPE"].Value = THREAD_DATA[1].ToString();

ConnectionManager Omega = package.Connections.Add("OLEDB");
Omega.Name = "OLEDBConnection";
String Strcon = obj.GetConnectionString(THREAD_DATA[0].ToString());
Omega.ConnectionString = Strcon;

//package.Connections["SQLNCLI10.1"].ConnectionString = obj.GetConnectionString(THREAD_DATA[0].ToString());
//Excute Package
Microsoft.SqlServer.Dts.Runtime.DTSExecResult results = package.Execute();
String Log;

if (results == Microsoft.SqlServer.Dts.Runtime.DTSExecResult.Failure)
{
foreach (Microsoft.SqlServer.Dts.Runtime.DtsError local_DtsError in package.Errors)
{
// Log = local_DtsError.Description.ToString();

//CommonFunctions.writeLogFile(Log,true);

}
}

}

After it executed the package, when i loop through the exceptions i get this

SSIS Error Code DTS_E_OLEDBERROR.   An OLE DB error has occurred. Error code: 0x80004005.\r\nAn OLE DB record is available.   Source: \"Microsoft SQL Server Native Client 10.0\"   Hresult: 0x80004005   Description: \"Login timeout expired\".\r\nAn OLE DB record is available.   Source: \"Microsoft SQL Server Native Client 10.0\"   Hresult: 0x80004005  Description: \"A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online.\".\r\nAn OLE DB record is available.   Source: \"Microsoft SQL Server Native Client 10.0\"   Hresult: 0x80004005   Description: \"TCP Provider: No connection could be made because the target machine actively refused it.\r\n\".\r\n

Please note that i want to use my webconfig not SSIS Config. in the Function GetConnectionString i return a Connection string and Pass it to the package.

Thanks

Vuyiswa Maseko,

Spoted in Daniweb-- Sorry to rant. I hate websites. They are just wierd. They don't behave like normal code.

C#/VB.NET/ASP.NET/SQL7/2000/2005/2008
http://www.vuyiswamaseko.com
vuyiswa@its.co.za
http://www.itsabacus.co.za/itsabacus/

Re: SSIS Connection Problem in C#

R. Giskard Reventlov24-Feb-10 3:19

R. Giskard Reventlov

24-Feb-10 3:19

1: Is the connection string correct?
2: Do you have the requisite permissions?
3: Check the SQL configuration via the Sql Server Configuration Manager (was called somehting else in 2005: maybe Surface Area something or other) and ensure that it is set up correctly for your installation.
4: AS I recall the error you have listed is quite common: a quick search on Google would yield plenty of results. Here is one I found in about a second: TCP Provider: No connection could be made because the target machine actively refused it [^].

Tychotics: take us back to the moon

"Life, for ever dying to be born afresh, for ever young and eager, will presently stand upon this earth as upon a footstool, and stretch out its realm amidst the stars."
H. G. Wells

Re: SSIS Connection Problem in C#

Vimalsoft(Pty) Ltd24-Feb-10 4:09

Vimalsoft(Pty) Ltd

24-Feb-10 4:09

1: The connection string is Correct it comes from my webconfig

2: Can you give me more info on this one. Thanks

3: what Configuration needs to be there ? i have SQl 2005 installed and 2008 installed they both use the same port

4: i saw that links and i have Googled

Thanks

DateTime ; between query in SQL SERVER 2000

Karan_TN23-Feb-10 1:58

Karan_TN

23-Feb-10 1:58

hi,
currently i m using sql server 2000.
i declared one column as "startdate"
and the value as follows...

startdate="23-Feb-2010 4:00PM"
startdate="24-Feb-2010 4:00PM"

when i query as below i m not getting any record.

select * from tablename where startdate between '23-Feb-2010' and '23-Feb-2010'

can anyone help me? - KARAN

WoutL23-Feb-10 2:19

23-Feb-10 2:19

There aren't any dates between 23 feb 2010 and 23 feb 2010. Thats why youre query doesn't return anything. Try:

select * from tablename where startdate between '23-Feb-2010' and '24-Feb-2010'

Wout Louwers

Luc Pattyn23-Feb-10 2:32

Luc Pattyn

23-Feb-10 2:32

The idea is good, the suggestion isn't. There still isn't any date between those when treated as exclusive.

Smile | :)

Luc Pattyn [Forum Guidelines] [Why QA sucks] [My Articles]

I only read code that is properly formatted, adding PRE tags is the easiest way to obtain that.
All Toronto weekends should be extremely wet until we get it automated in regular forums, not just QA.

WoutL23-Feb-10 2:36

23-Feb-10 2:36

His startdates where:

startdate="23-Feb-2010 4:00PM"
startdate="24-Feb-2010 4:00PM"

So the first one is between the 23th and the 24th, isn't it?

Wout Louwers

Luc Pattyn23-Feb-10 2:41

Luc Pattyn

23-Feb-10 2:41

sorry, you're right. I would have given an example with a broader range though.

Smile | :)

Luc Pattyn [Forum Guidelines] [Why QA sucks] [My Articles]

Luc Pattyn23-Feb-10 2:31

Luc Pattyn

23-Feb-10 2:31

Read the documentation for your database.

http://www.w3schools.com/sql/sql_between.asp[^] says:

"In some databases, persons with the LastName of "Hansen" or "Pettersen" will not be listed, because the BETWEEN operator only selects fields that are between and excluding the test values).

In other databases, persons with the LastName of "Hansen" or "Pettersen" will be listed, because the BETWEEN operator selects fields that are between and including the test values)."

Smile | :)

Luc Pattyn [Forum Guidelines] [Why QA sucks] [My Articles]