Re: Password management in v7.x

"Oracle8 allows you to setup rules with passwords (must change after N days, can't reuse, etc)." That's Oracle8, we still talking about Oracle7.x here.

Thank you.Any information helps, and your update about Oracle8 was certainly valuable.

Umesh Tiwari

In article <3471537f.17962398_at_newshost>,   tkyte_at_us.oracle.com wrote:
>
> On Thu, 13 Nov 1997 12:52:22 -0600, UMESH.X.TIWARI_at_x400gw.ameritech.com wrote:
>
> [snip]
>
> >
> >2.Password expires after 30 days
> >
> >Unlike Unix and other operating systems, Oracle Database has not been
> >smart enough to allow such automatic enforcements. Its user profile
> >option can force users to limited amount of idle time, tablespace quota
> >etc. though. Depending on how your users connects to the database (either
> >via a GUI client, or telnet) your solutions could be very different.
> >Unluckily, you still have to depend on your home grown solutions, Oracle
> >does not have one so far (I would love be informed otherwise).
> >
>
> Oracle8 allows you to setup rules with passwords (must change after N days,
> can't reuse, etc).
>
> >3.Password not kept in clear form on database.
> >
> >Passwords are NOT kept in clear form in the database (I suppose by 'clear'
> >you mean 'not encrypted').
> >
> >The encryption mechanism again is not as smart as a typical Unix system
> >provides, but it is sufficient enough to protect a users password for
> >short term, provided you ask the users to keep changing their passwords
> >on a regular basis (your earlier points).
> >
>
> Would you care to elaborate on that? AFAIK, its as 'smart' as unix.
>
> >Umesh Tiwari
> >Ameritech Corprate Center
> >Hoffman Estates,Illinois
> >-----------------------
> >In article <34679DF4.2DC1BEEB_at_vdoj.vic.gov.au>,
> > Department of Justice <sysadmin_at_vdoj.vic.gov.au> wrote:
> >>
> >> Does anyone have a documented solution for this? Usual stuff needed:
> >>
> >> User able to change own password
> >> Password expires after 30 days
> >> Password not kept in clear form on database
> >> etc
> >>
> >> Thanks,
> >>
> >> Andy Horne
> >> Oracle DBA
> >
> >-------------------==== Posted via Deja News ====-----------------------
> > http://www.dejanews.com/ Search, Read, Post to Usenet
>
> Thomas Kyte
> tkyte_at_us.oracle.com
> Oracle Government
> Bethesda MD
>
> http://govt.us.oracle.com/ -- downloadable utilities
>
> ----------------------------------------------------------------------------
> Opinions are mine and do not necessarily reflect those of Oracle Corporation
>
> Anti-Anti Spam Msg: if you want an answer emailed to you,
> you have to make it easy to get email to you. Any bounced
> email will be treated the same way i treat SPAM-- I delete it.

-------------------==== Posted via Deja News ====-----------------------
      http://www.dejanews.com/     Search, Read, Post to Usenet