| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Usenet -> c.d.o.server -> Re: Password management in v7.x
On Thu, 13 Nov 1997 12:52:22 -0600, UMESH.X.TIWARI_at_x400gw.ameritech.com wrote:
[snip]
>
>2.Password expires after 30 days
>
>Unlike Unix and other operating systems, Oracle Database has not been
>smart enough to allow such automatic enforcements. Its user profile
>option can force users to limited amount of idle time, tablespace quota
>etc. though. Depending on how your users connects to the database (either
>via a GUI client, or telnet) your solutions could be very different.
>Unluckily, you still have to depend on your home grown solutions, Oracle
>does not have one so far (I would love be informed otherwise).
>
Oracle8 allows you to setup rules with passwords (must change after N days, can't reuse, etc).
>3.Password not kept in clear form on database.
>
>Passwords are NOT kept in clear form in the database (I suppose by 'clear'
>you mean 'not encrypted').
>
>The encryption mechanism again is not as smart as a typical Unix system
>provides, but it is sufficient enough to protect a users password for
>short term, provided you ask the users to keep changing their passwords
>on a regular basis (your earlier points).
>
Would you care to elaborate on that? AFAIK, its as 'smart' as unix.
>Umesh Tiwari
>Ameritech Corprate Center
>Hoffman Estates,Illinois
>-----------------------
>In article <34679DF4.2DC1BEEB_at_vdoj.vic.gov.au>,
> Department of Justice <sysadmin_at_vdoj.vic.gov.au> wrote:
>>
>> Does anyone have a documented solution for this? Usual stuff needed:
>>
>> User able to change own password
>> Password expires after 30 days
>> Password not kept in clear form on database
>> etc
>>
>> Thanks,
>>
>> Andy Horne
>> Oracle DBA
>
>-------------------==== Posted via Deja News ====-----------------------
> http://www.dejanews.com/ Search, Read, Post to Usenet
Thomas Kyte
tkyte_at_us.oracle.com
Oracle Government
Bethesda MD
http://govt.us.oracle.com/ -- downloadable utilities
Anti-Anti Spam Msg: if you want an answer emailed to you, you have to make it easy to get email to you. Any bounced email will be treated the same way i treat SPAM-- I delete it. Received on Thu Nov 13 1997 - 00:00:00 CST
 |
 |