OraFAQ Forum: Application Express, ORDS & MOD_PLSQL

Home » Developer & Programmer » Application Express, ORDS & MOD_PLSQL » Password Complexity in APEX (APEX 4.0.1)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Password Complexity in APEX [message #529550]

Tue, 01 November 2011 14:31

oracle143
Messages: 6
Registered: November 2011
Location: California

Junior Member

Hi,
We created new workspace in apex and created new application in the newly created workspace ..

Now that we have new workspace and new application we created new users to access the application ..

I want to add password complexity rules for these users created in the application?

where can we set the rules..

Any help is appreciated, this is urgent requirement ..

Thanks

Report message to a moderator

Re: Password Complexity in APEX [message #529602 is a reply to message #529550]

Wed, 02 November 2011 02:38

Littlefoot
Messages: 21823
Registered: June 2005
Location: Croatia, Europe

Senior Member
Account Moderator

Connect as an administrator. Go to "Manage Instance", choose "Security" within the "Instance settings" section. In there you'll find "Workspace Password Policy" which allows you to set various options.

Report message to a moderator

Re: Password Complexity in APEX [message #529728 is a reply to message #529602]

Wed, 02 November 2011 12:51

oracle143
Messages: 6
Registered: November 2011
Location: California

Junior Member

Hi Littlefoot,
Thank you for your response .. but the solution you offered me works for workspace users not for the application users we created, attached is the screen shot of the issue what I'm looking for is the attached document .. Please help me!!

Thanks in advance

Report message to a moderator

Re: Password Complexity in APEX [message #529729 is a reply to message #529728]

Wed, 02 November 2011 12:58

oracle143
Messages: 6
Registered: November 2011
Location: California

Junior Member

Hi Littlefoot,
I'm attaching the document again ..

Attachment: ams1.pdf
(Size: 49.68KB, Downloaded 3045 times)

Report message to a moderator

Re: Password Complexity in APEX [message #529803 is a reply to message #529729]

Thu, 03 November 2011 02:16

Littlefoot
Messages: 21823
Registered: June 2005
Location: Croatia, Europe

Senior Member
Account Moderator

Quote:

I'm looking for password complexity rules for the users we create in the application

How do you create these users? Is it a standard "CREATE USER <user_name> IDENTIFIED BY <some_password>" statement? If so, the documentation says:Oracle

If you are using the Oracle Database password complexity verification routine, it requires a more complex combination of characters than the normal naming rules permit. You implement this routine with the UTLPWDMG.SQL script, which is further described in Oracle Database Security Guide.

See Password complexity verification.

If not, what password is it, then?

Report message to a moderator

Re: Password Complexity in APEX [message #529972 is a reply to message #529550]

Thu, 03 November 2011 14:21

oracle143
Messages: 6
Registered: November 2011
Location: California

Junior Member

Hi,
Thank you for your response, we created custom table to store application users/passwords , and trying to add password complexity rules for these users.

Thx

Report message to a moderator

Re: Password Complexity in APEX [message #530700 is a reply to message #529972]

Wed, 09 November 2011 17:30

oracle143
Messages: 6
Registered: November 2011
Location: California

Junior Member

Hi,
I still have the issue, I want to know how to set up the password rules , for the application users I create in APEX ?

Any help is appreciated

Thanks

Report message to a moderator

Re: Password Complexity in APEX [message #530709 is a reply to message #530700]

Wed, 09 November 2011 23:04

Michel Cadot
Messages: 68729
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Quote:

You implement this routine with the UTLPWDMG.SQL script, which is further described in Oracle Database Security Guide.

Regards
Michel

Report message to a moderator

Re: Password Complexity in APEX [message #530821 is a reply to message #530709]

Thu, 10 November 2011 16:37

oracle143
Messages: 6
Registered: November 2011
Location: California

Junior Member

Hi,
Thank you for your solution, I tried the solution provided but that did not work. This is what I did

Step1: created verify_function

Step2: ran the alter command
ALTER PROFILE DEFAULT LIMIT
PASSWORD_LIFE_TIME 60
PASSWORD_GRACE_TIME 10
PASSWORD_REUSE_TIME 1800
PASSWORD_REUSE_MAX UNLIMITED
FAILED_LOGIN_ATTEMPTS 3
PASSWORD_LOCK_TIME 1/1440
PASSWORD_VERIFY_FUNCTION verify_function

Looks like this sets the password rules for DBusers but I'm looking for password rules for application users ..

Thank you

Report message to a moderator

Re: Password Complexity in APEX [message #530851 is a reply to message #530821]

Fri, 11 November 2011 01:40

Michel Cadot
Messages: 68729
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

If application users are not database users then you have to implement the policy in your application.

Regards
Michel

Report message to a moderator

Previous Topic:	change login page and logout_url
Next Topic:	enter password 3 times

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sun Jan 05 21:44:09 CST 2025