Re: Help - profile and verify_function

Apparently, according to Oracle, ALTER USER statement does not support password changes when a password verify function is in place.

Following cut and pasted from a MetaLink forum

"A user can still use ALTER USER to change their password unless you have a password verify function in effect. The capability to define a password verify function was introduced in Oracle8 and there were problems associated with enforcement via ALTER USER. Unfortunately, it is not feasible, due to security issues, to incorporate the functionality of allowing a password change using ALTER USER when a password verification function is in effect. "

M

rzoof_at_yahoo.com (q) wrote in message news:<7f888051.0204180712.18489213_at_posting.google.com>...
> Hallo.
> I've got a user with minimal amout of priviliges and i want him to be
> able to change his own password. Everything is fine untill I enable
> verify_function. If the verify_function is on (i mean if the users
> profile has the limit password_verify function set to verify_function
> that can be found in utlpwdmg.sql script), user can not change his own
> password. He can do it only when hi's got the alter user privilige.
> The error that appeares is ORA-28003: password verification for the
> specified password failed, with no other explanation - it seems there
> was a problem in ececuting verify_fuction. The new password complexity
> is ok, it complies every limitation (length, contains one digit, one
> character and one punctuation ...).
> Do you know what is wrong? Thank you for help.
Received on Fri Apr 19 2002 - 06:48:41 CDT