REPOST: Re: Can I stop someone changing their password ?

Norman Dunbar wrote:
>
> Strange question time again :
>
> Server : Solaris 7
> Oracle : 8.1.7.2.0
>
> A fellow DBA has a problem on her site, she has a user which has to have
> a specific password - she inherited an application set up in this way
> and cannot change it unfortunately.
>
> All the users - who have their own OPS$ users - know the password and
> none of them have alter user privs, neither does the actual user in
> question.
>
> Someone is changing the password for the application user. This causes
> the client apps to fall over as they can no longer connect. Auditing is
> turned on, and she is auditing alter user, however, it appears that
> there are ways and means to change the password without using alter user
> - 'password' for example and this cannot be audited. She has spoken to
> Oracle and they appear to be stumped at the moment.
>
> I've looked at profiles, but they have lots of options to force a
> password change, but nothing to stop it from being done.
>
> Anyone had this problem before and/or knows how to stop it, or at least
> help us identify the 'poor misguided creature' who insists on changing
> the password ?
>
> Much obliged for any information.
>
> Rehards,
> Norman.
>
> ------------------------------------------------------------------------
> -----
> Norman Dunbar EMail: Norman.Dunbar_at_LFS.co.uk
> Database/Unix administrator Phone: 0113 289 6265
> Fax: 0113 289 3146
> Lynx Financial Systems Ltd. URL: http://www.Lynx-FS.com
> ------------------------------------------------------------------------
> -----

Add a password verification function which only allows new and old password to be the same..

hth
connor

-- 
==============================
Connor McDonald

http://www.oracledba.co.uk

"Some days you're the pigeon, some days you're the statue..."

========= WAS CANCELLED BY =======:
From: Connor McDonald <connor_mcdonald_at_yahoo.com>
Control: cancel <3C506F54.6F98_at_yahoo.com>
Subject: cmsg cancel <3C506F54.6F98_at_yahoo.com>
Date: Mon, 28 Jan 2002 00:23:47 GMT
Message-ID: <cancel.3C506F54.6F98_at_yahoo.com>
X-No-Archive: yes
Newsgroups: microsoft.test,alt.flame.niggers,comp.databases.oracle.server
NNTP-Posting-Host: w088.z064003087.lax-ca.dsl.cnc.net 64.3.87.88
Lines: 1         
Path: news.uni-stuttgart.de!nntp.cs.uni-magdeburg.de!fu-berlin.de!news.maxwell.syr.edu!out.nntp.be!propagator-SanJose!in.nntp.be!news-in-sanjose!sjc-feed.news.verio.net!sea-feed.news.verio.net!news.verio.net!msrnewsc1!cppssbbsa01.microsoft.com!tkmsftngp01!tkmsftngp04!u&n&a&c&anceller
Xref: news.uni-stuttgart.de control:40724545

This message was cancelled from within The Unacanceller's glorious new software, Lotus 1-2-3 For Rogue Cancellers.