EXPERT RESPONSE
If you haven't already looked at it, please see utlpwdmg.sql in your $ORACLE_HOME/rdbms/admin directory for the sample password verification function provided by Oracle. You should be able to modify that to your needs.
Once you have your function ready, alter the profile to which you wish to assign that password verification function.
For example:
-- This script alters the default parameters for Password Management.
-- This means that all the users on the system have Password Management
-- enabled and set to the following values unless another profile is
-- created with parameter values set to different value or UNLIMITED
-- is created and assigned to the user.
ALTER PROFILE DEFAULT
LIMIT PASSWORD_LIFE_TIME 60
PASSWORD_GRACE_TIME 10
PASSWORD_REUSE_TIME 1800
PASSWORD_REUSE_MAX UNLIMITED
FAILED_LOGIN_ATTEMPTS 3
PASSWORD_LOCK_TIME 1/1440
PASSWORD_VERIFY_FUNCTION verify_function;
For more information, you can also refer to the Oracle documentation (these two in particular):
- Oracle8i Administrator's Guide - Chapter 22 Establishing Security Policies
- Oracle8i SQL Reference - ALTER PROFILE, CREATE PROFILE Statements
For More Information
|
