password complexity -- implementing security changes

From: J. Dex <cemail_219_at_hotmail.com>
Date: Thu, 02 Mar 2006 15:49:04 -0500
Message-ID: <BAY115-F3169EEEC0B0C12FB0ED8FA5F50@phx.gbl>

I am wondering how other shops handle security changes relating to password complexity.

We just implemented a lot of security features into our database including password complexity. The users login through an application. Adding password complexity did not appear to lock out their accounts. When they try and login, though, with multiple attempts it finally does lock it. Do most of you just give them a password initially that fits complexity and tell them they have to change it?

I am still not even sure if the application is going to prompt them after 90 days to change the password or they will just start getting locked out.

---

Don’t just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/

--
http://www.freelists.org/webpage/oracle-l

Received on Thu Mar 02 2006 - 14:49:04 CST