Home » Developer & Programmer » Application Express & MOD_PLSQL » Password Complexity in APEX (APEX 4.0.1)
Password Complexity in APEX [message #529550] Tue, 01 November 2011 14:31 Go to next message
oracle143
Messages: 6
Registered: November 2011
Location: California
Junior Member
Hi,
We created new workspace in apex and created new application in the newly created workspace ..

Now that we have new workspace and new application we created new users to access the application ..

I want to add password complexity rules for these users created in the application?

where can we set the rules..

Any help is appreciated, this is urgent requirement ..

Thanks
Re: Password Complexity in APEX [message #529602 is a reply to message #529550] Wed, 02 November 2011 02:38 Go to previous messageGo to next message
Littlefoot
Messages: 19770
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
Connect as an administrator. Go to "Manage Instance", choose "Security" within the "Instance settings" section. In there you'll find "Workspace Password Policy" which allows you to set various options.
Re: Password Complexity in APEX [message #529728 is a reply to message #529602] Wed, 02 November 2011 12:51 Go to previous messageGo to next message
oracle143
Messages: 6
Registered: November 2011
Location: California
Junior Member
Hi Littlefoot,
Thank you for your response .. but the solution you offered me works for workspace users not for the application users we created, attached is the screen shot of the issue what I'm looking for is the attached document .. Please help me!!

Thanks in advance
Re: Password Complexity in APEX [message #529729 is a reply to message #529728] Wed, 02 November 2011 12:58 Go to previous messageGo to next message
oracle143
Messages: 6
Registered: November 2011
Location: California
Junior Member
Hi Littlefoot,
I'm attaching the document again ..
  • Attachment: ams1.pdf
    (Size: 49.68KB, Downloaded 363 times)
Re: Password Complexity in APEX [message #529803 is a reply to message #529729] Thu, 03 November 2011 02:16 Go to previous messageGo to next message
Littlefoot
Messages: 19770
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
Quote:
I'm looking for password complexity rules for the users we create in the application

How do you create these users? Is it a standard "CREATE USER <user_name> IDENTIFIED BY <some_password>" statement? If so, the documentation says:Oracle

If you are using the Oracle Database password complexity verification routine, it requires a more complex combination of characters than the normal naming rules permit. You implement this routine with the UTLPWDMG.SQL script, which is further described in Oracle Database Security Guide.

See Password complexity verification.

If not, what password is it, then?
Re: Password Complexity in APEX [message #529972 is a reply to message #529550] Thu, 03 November 2011 14:21 Go to previous messageGo to next message
oracle143
Messages: 6
Registered: November 2011
Location: California
Junior Member
Hi,
Thank you for your response, we created custom table to store application users/passwords , and trying to add password complexity rules for these users.

Thx
Re: Password Complexity in APEX [message #530700 is a reply to message #529972] Wed, 09 November 2011 17:30 Go to previous messageGo to next message
oracle143
Messages: 6
Registered: November 2011
Location: California
Junior Member
Hi,
I still have the issue, I want to know how to set up the password rules , for the application users I create in APEX ?

Any help is appreciated

Thanks
Re: Password Complexity in APEX [message #530709 is a reply to message #530700] Wed, 09 November 2011 23:04 Go to previous messageGo to next message
Michel Cadot
Messages: 59748
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
You implement this routine with the UTLPWDMG.SQL script, which is further described in Oracle Database Security Guide.


Regards
Michel
Re: Password Complexity in APEX [message #530821 is a reply to message #530709] Thu, 10 November 2011 16:37 Go to previous messageGo to next message
oracle143
Messages: 6
Registered: November 2011
Location: California
Junior Member
Hi,
Thank you for your solution, I tried the solution provided but that did not work. This is what I did

Step1: created verify_function

Step2: ran the alter command
ALTER PROFILE DEFAULT LIMIT
PASSWORD_LIFE_TIME 60
PASSWORD_GRACE_TIME 10
PASSWORD_REUSE_TIME 1800
PASSWORD_REUSE_MAX UNLIMITED
FAILED_LOGIN_ATTEMPTS 3
PASSWORD_LOCK_TIME 1/1440
PASSWORD_VERIFY_FUNCTION verify_function

Looks like this sets the password rules for DBusers but I'm looking for password rules for application users ..

Thank you
Re: Password Complexity in APEX [message #530851 is a reply to message #530821] Fri, 11 November 2011 01:40 Go to previous message
Michel Cadot
Messages: 59748
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
If application users are not database users then you have to implement the policy in your application.

Regards
Michel
Previous Topic: change login page and logout_url
Next Topic: enter password 3 times
Goto Forum:
  


Current Time: Sun Nov 23 04:12:53 CST 2014

Total time taken to generate the page: 0.12241 seconds