Re: Oracle 19c Password Change Issue

Did the migration enable/re-enable (intentionally or otherwise) password verification?
Via the docs
<https://docs.oracle.com/en/database/oracle/oracle-database/19/sqlrf/ALTER-USER.html#GUID-9FCD038D-8193-4241-85CD-2F4723B27D44__GUID-75DF3819-735E-43A8-A6C6-23EAD42BBC40>

> *You can omit the REPLACE clause if you are setting your own password* or
> you have the ALTER USER system privilege and you are changing another
> user's password. However, unless you have the ALTER USER system privilege,*
> you must always specify the REPLACE clause if a password complexity
> verification function has been enabled* [...]
>

Regards,

John P.

On Mon, May 20, 2024 at 7:41 AM Scott Canaan <dmarc-noreply_at_freelists.org> wrote:

> We just migrated a database from Red Hat 7 to Red Hat 8, both on the same
> version of Oracle (19.23). The customer is telling me that when their
> users try to change their password in the application, they get an
> ORA-28221: REPLACE not specified. I explained that the syntax in Oracle 19
> to change a password is:
>
>
>
> Alter user <username> identified by <new password> replace <old password>;
>
>
>
> He claims that prior to the migration, that was not the case even though
> the Oracle version didn’t change. He is adamant that the migration “broke”
> something. I don’t see how. What is going on?
>
>
>
> *Scott Canaan ‘88*
>
> *Sr Database Administrator *Information & Technology Services
> Finance & Administration
>
>
> *Rochester Institute of Technology *o: (585) 475-7886 | f: (585) 475-7520
>
> *srcdco_at_rit.edu <srcdco_at_rit.edu>* | c: (585) 339-8659
>
> *CONFIDENTIALITY NOTE*: The information transmitted, including
> attachments, is intended only for the person(s) or entity to which it is
> addressed and may contain confidential and/or privileged material. Any
> review, retransmission, dissemination or other use of, or taking of any
> action in reliance upon this information by persons or entities other than
> the intended recipient is prohibited. If you received this in error, please
> contact the sender and destroy any copies of this information.
>
>
>

--
http://www.freelists.org/webpage/oracle-l