RE: Password verification function

From: <oracle-l-bounce_at_freelists.org>
Date: Wed, 10 May 2006 15:24:35 -0400
Message-ID: <6591F529444E9748A546718B3D1A67010495FC99@xcgv2605.northgrum.com>

One further data point. I took the Oracle-supplied code and stripped out everything except the part which checks that the password is not the same as the userid. If I log in as a regular user, and try to change the password I get ORA-28003 regardless of what I enter. If I connect as system and try to change the password to equal the username, I get ORA-28003 followed by the expected error code and message from raise_application_error.

Is this a privilege problem that I am dealing with?

Here is my code:

---

---

create or replace function dummy_pw_verify (username varchar2,

        password varchar2,
        old_password varchar2)
        return boolean is
BEGIN
        if nls_lower(password) = nls_lower(username) then
            raise_application_error(-20001, 'Password same as
username');
        end if;
        return(true);

end;

---

---

Thanks,
Peter Schauss

-----Original Message-----

From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Schauss, Peter Sent: Wednesday, May 10, 2006 2:24 PM
To: oracle-l_at_freelists.org
Subject: Password verification function

I am trying to implement some simple password complexity rules by adding a password verification function to the default profile. I am using Oracle's sample code (utlpwdmg.sql) as a starting point. Looking at the code, I can see that it raises application errors (-20001, -20002 ...) for things like a password which is the same as the user name, password too short, etc. When I try to change a password, however, all I get is the generic ORA-28003 error, even when I try a password which, I believe, should pass. What am I missing here?

Environment: Oracle 8.1.7.4 with the cpuJan2006 patches, AIX 5.3.

Thanks,
Peter Schauss
--

http://www.freelists.org/webpage/oracle-l

--

http://www.freelists.org/webpage/oracle-l Received on Wed May 10 2006 - 14:24:35 CDT