Today i have seen a very strange data in Siebel database that actually shouldn't be there just as a un-encrypted free text. I think people from Siebel Admin would know that which table i am talking about.
Usually all user details in Siebel database are kept in S_USER table and passwords are never stored in Siebel Database. Whenever there is a need to store the password either the value is masked or is stored in database after encryption.
Even in siebns.dat file the password is not stored. All the name subsystems in server manager and on UI use masking to show password. But at one place, as I know the password is kept as clear string. This happens on the Server Manager Job Parameter table i.e. S_SRM_REQ_PARAM table.
I don’t know what was the reason the data on this table was kept unencrypted. If you want to get the password you just need to query the VALUE column of the parameter table and you will find the password in next row where SADMIN or SIEBEL user name is stored.
select VALUE from SIEBEL.S_SRM_REQ_PARAM
This happens because to run certain jobs like Generate Triggers database user and password are required as arguments but due to some limitation of the jobs this data is not encrypted. So if your server administrator use SADMIN as the password for generate trigger command you can see the SADMIN password by querying the database.
Gud luck :)
How to create cookies from server side?
-
Yes, you read it correctly, you can create cookies in the browser from the
server side, and get your browser script to access them. This is enabled
via Web...
5 years ago
Gaurav · 805 weeks ago
very nice to see this hacking trick !!
Tejeshwer 34p · 805 weeks ago
But keep the table cleanup component in mind, this component clears the completed jobs from the table.
Geeksajan · 800 weeks ago
But a more reliable way is using a Runtime Business Service.
Check out this:
http://geeksajan.blogspot.com/2009/10/runtime-mag...
--- geeksajan
Tejeshwer 34p · 800 weeks ago
nirav · 778 weeks ago
Can you suggest the solution for this one, how to encrypt password in this table, as this is critical security issue in our oraganisation, please help us.
thanks
Bhupesh · 751 weeks ago
Best you can do is that you can clear the SRM table once your job is complete by executing the DELETE command for your record.
nss · 705 weeks ago
wagfeliz · 478 weeks ago