Q
Problem solve Get help with specific problems with your technologies, process and projects.

Enforcing password complexity

I am trying to enforce password complexity on certain profiles. How can I:

  1. Write and install a function to do this
  2. Call it each time someone tries to change the password?
I use DBA Studio. We are on Solaris 2.7, Oracle 8.1.6

If you haven't already looked at it, please see utlpwdmg.sql in your $ORACLE_HOME/rdbms/admin directory for the sample password verification function provided by Oracle. You should be able to modify that to your needs.

Once you have your function ready, alter the profile to which you wish to assign that password verification function.

For example:

-- This script alters the default parameters for Password Management. 
-- This means that all the users on the system have Password Management 
-- enabled and set to the following values unless another profile is 
-- created with parameter values set to different value or UNLIMITED 
-- is created and assigned to the user.  

ALTER PROFILE DEFAULT 
LIMIT PASSWORD_LIFE_TIME 60 
PASSWORD_GRACE_TIME 10 
PASSWORD_REUSE_TIME 1800 
PASSWORD_REUSE_MAX UNLIMITED 
FAILED_LOGIN_ATTEMPTS 3 
PASSWORD_LOCK_TIME 1/1440 
PASSWORD_VERIFY_FUNCTION verify_function; 
For more information, you can also refer to the Oracle documentation (these two in particular):
  • Oracle8i Administrator's Guide - Chapter 22 Establishing Security Policies
  • Oracle8i SQL Reference - ALTER PROFILE, CREATE PROFILE Statements

For More Information


Dig Deeper on Oracle and SQL

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

SearchDataManagement

SearchBusinessAnalytics

SearchSAP

SearchSQLServer

TheServerSide.com

SearchDataCenter

SearchContentManagement

SearchHRSoftware

Close