Password Complexity in Databases

Password complexity is one of many things that IT auditors examine to see whether a system is secure. IT policies usually state that a password must be a minimum length and include a mix of uppercase and lowercase letters, numbers, and special characters.

One special character to avoid with Oracle is the at symbol (@) because @ is used in Oracle to indicate which Oracle server to use. The full format of the SQL*Plus connect statement is:

CONNECT username/password@alias

where alias is an Oracle Net alias that stands for a server, port, and instance name.

Listing A shows the error generated when @ is part of a password: ORA-12154, "TNS: could not resolve the connect identifier specified." The @ symbol is mistaken for an Oracle Net alias, and the error occurs because the part after @ is not a valid alias.

Listing A
SQL> CREATE USER testuser1 IDENTIFIED BY "Cat"
2 DEFAULT TABLESPACE users
3 TEMPORARY TABLESPACE temp;

User created.

SQL> CREATE USER testuser2 IDENTIFIED BY "H@t"
2 DEFAULT TABLESPACE users
3 TEMPORARY TABLESPACE temp;

User created.

SQL> GRANT create session TO testuser1, testuser2;

Grant succeeded.

SQL> connect testuser1/cat
Connected.
SQL> connect testuser2/h@t
ERROR:
ORA-12154: TNS:could not resolve the connect identifier specified


Warning: You are no longer connected to ORACLE.
SQL> connect testuser2/"h@t"
Connected.
SQL>

The workaround is to enclose the password in quotes, as shown in the listing.

This behavior exists even in Oracle 10g, Release 2. Also, note that the logon for testuser1 was successful using the password "cat," even though the password is "Cat." The next major release, 11g, is scheduled to replace the password algorithm with a more secure one that permits true uppercase and lowercase letters in passwords. The @ problem may go away in that release as well. In the meantime, you can prevent users from setting passwords that contain @ by creating a password complexity function in PL/SQL and rejecting any new password if it contains the @ symbol.

Health tips for prolonged PC users

Prolonged use of PC or laptops can cause serious problems to the human body which develop over a long period of time and hence are more susceptible to be ignored or confused with something else. I have been a computer user for last 10 or 12 years and have faced some of these problems myself. luckily, someone told me to follow a few simple and very effective things/practices that have helped not only to mitigate the risks but also reverse the damage done to a great extent.

I share these tips in a supposedly tech.tips blog because i feel that it is the right place to put these things in perspective.

1. Usually a PC user is involved deeply in whatever s/he is doing - programming, blogging, reading, searching, playing video/music, etc - and doesn't listen to the nature's calls. DO listen to them and urinate every 60 to 90 minutes to release the pressure from the bladder.
2. Drink water - say 2-3 gulps every 10 minutes or better 1 glass (200 to 300 ml) every half an hour. It will help in cleaning your body and controlling the body temperature.
3. Take your eyes away from the screen twice in a minute or two. continuous staring at the screen will stiffen the muscles and dry them causing ache and swelling.
4. Blink regularly. While working with something very indulging, generally we forget to blink our eyes leading to dryness and burning sensation in them. The natural blink rate of for human eye is 5-6 times per minute. We should at least remember to blink trice a minute.
5. Take a walk. Try to leave your seat every 15 to 20 minutes so that the muscles of your legs, back and shoulders get some relaxation. Walking will help you with neck also.
6. Even if sitting do simple and gentle neck movements - rotating or moving them sideways or to-and-fro. Spondalitis is a very common problem found in PC users.

Hope these will help you all

HAPPY Blogging.

How to configure HUAWEI SmartAX MT841 for BSNL Broadband

This is the step by step procedure on how to configure BSNL Type IV (MT841) modem for autodial and wireless setup.

First do not insert the WLAN card in to your modem. Connect it with supplied LAN cable or via USB. Go to your computer Ethernet connection setup and change the IP of your Ethernet card to the following.

IP Address: 192.168.1.2

Subnet Mask: 255.255.255.0

Default Gateway: 192.168.1.1

Now in you browser window open up the configuration screen of MT841 (by typing http://192.168.1.1 in the address bar). The default user name and password are ‘admin’ and ‘admin’.

In the left side you see the wizard from Basic drop down list select Connections. On the details page there is a table and on its left side you see PVC0 to PVC6.

Now you only need to change the value of PVC0 to dial up the connection automatically with PPPoE setup. But, some how, you can not edit the connection of PVC0 by clicking the note icon on the configuration screen. It only lets you change the settings for which the PVC is created and lets you delete it.

So you need to delete all the PVC in the list. Stat from PVC6 press notes icon and then delete. Do the same process for PVC6 to PVC2 and PVC0 do not delete PVC1 until you create new PVC. Now press the new button and create new PVC specify following parameters for the new PVC:

WAN Type: PPPoE

VPI/VCI: 0/35

Encapsulation: LLC

Default Route: Enable

User Name:

Password:

Use DNS: Enable

Now click on Apply. It will show new PVC and it display it as PVC1 now delete PVC0 from the list and create remaining PVCs for your connection by pressing new. All PVC should have following settings.

Wan Type: Bridge

Encapsulation: LLC

and for VPI/VCI following values

PVC1: 8 /35

PVC2: 0 /100

PVC3: 0 /32

PVC4: 8 /81

PVC5: 8 / 32

PVC6: 14 / 24

Now you have created all the PVC's with you dialer configured at PVC1. Go to advanced select Firewall and select enable. Go to DNS select Enable and put following value in the DNS:

Primary DNS: 61.1.96.69

Secondary DNS: 61.1.96.71

Save your change and reboot the router. After reboot you should be automatically connect to the internet without dialing PPPoE dialer from the computer. Now turn off the router and connect the WLAN Card to the router and disconnect the LAN cable from the modem and computer. After you see the WLAN light on in the router stat your WiFi connection from computer or modem to search for available network and you will be connected to the net.