Re: password rules

From: Pete Finnigan <plsql_at_petefinnigan.com>
Date: Sat, 10 Apr 2004 13:03:09 +0100
Message-ID: <U535ExA9J+dARx7h@peterfinnigan.demon.co.uk>

Hi,

If you use a standard password i.e. no quotes then of course the password has to start with a letter, if you use quotes then it can start with any character. Here is a test case:

SQL*Plus: Release 9.2.0.1.0 - Production on Sat Apr 10 12:55:25 2004

Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.

Connected to:
Personal Oracle9i Release 9.2.0.1.0 - Production With the Partitioning, OLAP and Oracle Data Mining options JServer Release 9.2.0.1.0 - Production

SQL> create user sans3 identified by 3ecretpasswd; create user sans3 identified by 3ecretpasswd

                                *

ERROR at line 1:
ORA-00988: missing or invalid password(s)

SQL> create user sans3 identified by "3ecretpasswd";

User created.

SQL> Kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

Received on Sat Apr 10 2004 - 07:03:09 CDT