Oracle Database 11 g - Online Public Access Catalog

CHAPTER 5 ■ DATABASE SECURITY 237SQL> alter profile defaultlimit password_verify_function nullSQL> /Profile altered.Change Database Account PasswordsNow we will look at the password verification utility at work. First we will attempt to change thepassword that differs from the last password by three characters using the password commandfrom SQL*Plus.■Note Oracle passwords can be changed using the traditional alter user USERNAME identified byPASSWORD; syntax, or they can be changed using the password command from SQL*Plus.SQL> passwordChanging password for RODBAOld password:New password:Retype new password:ERROR:ORA-28003: password verification for the specified password failedORA-20011: Password should differ from theold password by at least 3 charactersPassword unchangedNext, we attempt to change the password to something less than eight characters:SQL> alter user rodba identified by rodba;alter user rodba identified by rodba*ERROR at line 1:ORA-28003: password verification for the specified password failedORA-20001: Password length less than 8You will receive an error message stating that the password length is too short. Anotherrule is that passwords must have a numeric character in them. If you attempt to change thepassword to something that is eight characters or more but does not have a numeric character,you will receive another error message:SQL> alter user rodba identified by ohmygodwhatishappening;alter user rodba identified by ohmygodwhatishappening*ERROR at line 1:ORA-28003: password verification for the specified password failedORA-20008: Password must contain at least one digit, one character