OraFAQ Forum: Security » Password Policy

Home » RDBMS Server » Security » Password Policy (Oracle 10g)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Password Policy [message #435168]

Mon, 14 December 2009 19:02

gmkhaw@yahoo.com
Messages: 14
Registered: September 2006
Location: Malaysia

Junior Member

2 questions:
a) Anyway to set password policy in Oracle 10g? Such as expire in 6 mths.
b) Any tool for client to change password in windows environment?

Thanks

Report message to a moderator

Re: Password Policy [message #435171 is a reply to message #435168]

Mon, 14 December 2009 22:58

ramoradba
Messages: 2457
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...

Senior Member

1)

http://youngcow.net/doc/oracle10g/server.102/b14200/statements_6010.htm

2) all depends on your Application logic.Hold on...Please let me know this first.
What do you mean by "client" here?your product clients?Or the users in your database?

SQL> conn sriram/sriram
Connected.
SQL> password
Changing password for SRIRAM
Old password:
New password:
Retype new password:
Password changed
SQL> conn sriram/sriram
ERROR:
ORA-01017: invalid username/password; logon denied


Warning: You are no longer connected to ORACLE.
SQL> conn sriram/tejajun20
Connected.
SQL>

Sriram.

[Updated on: Mon, 14 December 2009 23:03]

Report message to a moderator

Re: Password Policy [message #435177 is a reply to message #435171]

Tue, 15 December 2009 00:11

gmkhaw@yahoo.com
Messages: 14
Registered: September 2006
Location: Malaysia

Junior Member

Actually my company is using ERP system but unfortunately the system doesn't provide a place for changing password. Thus the client is referring to application client.
Thanks

Report message to a moderator

Re: Password Policy [message #435191 is a reply to message #435177]

Tue, 15 December 2009 01:16

Michel Cadot
Messages: 67465
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

If you cannot afford a password change interface in your application then create a small program that uses the same Oracle interface than your ERP and allow to change the password.
The other solution is to install an Oracle client on user workstation to use SQL*Plus.

Regards
Michel

Report message to a moderator

Re: Password Policy [message #435368 is a reply to message #435168]

Tue, 15 December 2009 18:52

gmkhaw@yahoo.com
Messages: 14
Registered: September 2006
Location: Malaysia

Junior Member

Do you have any sample of VB calling the oracle library to change password or do you know where the table oracle keeps the user ID & pwd?

Report message to a moderator

Re: Password Policy [message #435383 is a reply to message #435368]

Tue, 15 December 2009 23:41

Michel Cadot
Messages: 67465
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

1/ Does your client has an Oracle client installed in their workstation.
2/ I didn't check but I'm pretty sure if you search for "VB Oracle change password" on Google you will find some program, if not come back
3/ It is sys.user$ exposed in dba_users (for version <11g) but what is your purpose with that information?

Regards
Michel

Report message to a moderator

Re: Password Policy [message #435386 is a reply to message #435383]

Wed, 16 December 2009 00:06

gmkhaw@yahoo.com
Messages: 14
Registered: September 2006
Location: Malaysia

Junior Member

1/ The oracle client was installed in their workstation(without sql plus)

3/ Can I update the system table (sys.user$) using sql command as I havent tested before.

Report message to a moderator

Re: Password Policy [message #435387 is a reply to message #435386]

Wed, 16 December 2009 00:51

Michel Cadot
Messages: 67465
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

You cannot update SYS objects or alter them in any way.

Regards
Michel

Report message to a moderator

Re: Password Policy [message #435406 is a reply to message #435387]

Wed, 16 December 2009 02:51

gmkhaw@yahoo.com
Messages: 14
Registered: September 2006
Location: Malaysia

Junior Member

Thanks, i have found change password command in VB:
With using the OracleInProcServer reference:

Dim oo4oSession As OraSession
Set oo4oSession = New OraSessionClass
oo4oSession.ChangePassword DSN, oldpwd, newpwd

Report message to a moderator

Re: Password Policy [message #435408 is a reply to message #435406]

Wed, 16 December 2009 02:52

Michel Cadot
Messages: 67465
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

Thanks for the feedback.

Regards
Michel

Report message to a moderator

Previous Topic:	Query on OS Authentication
Next Topic:	Assigning roles

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sun Oct 25 12:17:30 CDT 2020