RE: checking users's password

Deborah:

I don't have a script, but it should be fairly easy to create.

In pseudo-script:

For all Users
Loop
  select current_password, current_profile into temp_var1, temp_var2;   alter user profile default;
  alter user identified by username;
  select current_password into temp_var3;   if temp_var1 = temp_var3 then
    send nasty_gram to user;
  end if;
  alter user identified by values '&temp_var1';   alter user profile temp_var2;
End loop;

If you're using 8i or above, you can create a PL/SQL block that performs verification of passwords over and above the validation process built into Oracle. The one I use even logs the change to the alert_SID.log file so I can audit password changes.

HTH,
Mike

---
===========================================================================
Michael P. Vergara
Oracle DBA
Guidant Corporation


(909) 914-2304



-----Original Message-----
Sent: Friday, November 09, 2001 8:26 AM
To: Multiple recipients of list ORACLE-L


Hi Everyone,

Can anyone provide/share with me a script that will check the users 
password against their username.  We are trying to verify that no one is 
using his/her username as the password.
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Vergara, Michael (TEM)
  INET: mvergara_at_guidant.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).