Natalka Roshak's blog
Securing Your Database: A simple Brute Force Blocker
Submitted by Natalka Roshak on Wed, 2006-11-01 23:57.
If you've had to change a Unix password, you know that most systems won't let you use just anything as a password - your password must be a minimum length, and must not be too easy to guess or brute-force. Oracle doesn't come with this capability installed out of the box, but Oracle 8 and above let DBAs define a custom function to complexity-check user passwords. Oracle provides a default password verification function to do some basic checking, although DBAs need to know about it and install it manually.


