How Get Application name in a Login Failure

Question

&nbsp;Group&nbsp;&nbsp; &nbsp; &nbsp; How could I get the name of an application, in a login failure, by SQL Server.&nbsp; &nbsp; &nbsp; Where normally the error code would be&nbsp;Login failed for user '(???)'. Reason: Password did not match that for the login provided. [CLIENT: &lt;local machine&gt;]Error: 18456, Severity: 14, State: 8.

bake13 · Answer

Hi&nbsp;Nei_Bala&nbsp;-- This is not possible without writing a bit of code to capture that information and output to the SQL errorlog.&nbsp; Take a look at the RAISERROR function.&nbsp; Take care.
&nbsp;
RAISERROR (Transact-SQL) - SQL Server | Microsoft Learn

nei_bala · Answer

bake13&nbsp;&nbsp; &nbsp; &nbsp;This as I would need at the end (+/-) to know the password that would be incorrect, even if it is in a format ( hash / hex or something like that ), it can be a way, so that after I have the password, I can upload the user with this password and try to get the script after execution.To check which script could be there, I have a connection problem, even before getting to its execution.&nbsp;Example : As if it were an old process of an application with an old password that has not been updated to the current password.&nbsp;See based on the script below, where I was able to identify the name of the application, but so far I could not identify the password.https://www.mssqltips.com/sqlservertip/2581/sql-server-error-18456-finding-the-missing-databases/&nbsp;

olafhelper · Answer

You can not get the application name in the error message, and even if, anyone can "fake" the app name within the connection string.And it is not possible to get a password in clear text.Olaf

nei_bala · Answer

olafhelper&nbsp;&nbsp;&nbsp; &nbsp;As the process would be specifically linked to a company, so in this part of the application's name, there is a certain rule and this part with the link sent earlier has already helped to partially solve the problem.Now on the question of the password for being a local SQL Server user, by some sniffer tool I would not be able to capture at least the password in hash format, which would already suit me.Because then the user with this password that was identified would be going up, not needing to know the password because it is in hash format and there would be capturing the execution script.&nbsp;

olafhelper · Answer

Nei_Bala&nbsp;,the answer is still you can't get the app name nor the password (hash) in the error message.Olaf

Forum Discussion

How Get Application name in a Login Failure

7 Replies

Resources