what is "verify_function_11g" ?
This is Oracle provided function to implement restriction in passwords,
like lock time, grace time, failed login attemp, etc.,
verify_function - 10g
verify_function_11g - 11g
# create function using Oracle provided script utlpwdmg.sql
# should be connected as sysdba (function should be created in 'sys' schema)
SQL > conn / as sysdba
SQL > @ ?/rdbms/admin/utlpwdmg.sql
Caution: This script alters the 'default' profile and default profile might be assigned to your application user in production database. So application users will be effected with password policy.
SQL> column OBJECT_NAME for a20
SQL> select object_name, object_type, owner from dba_objects where object_name like 'VERIFY%';
OBJECT_NAME OBJECT_TYPE OWNER
------------------- ------------- -----------
VERIFY_FUNCTION_11G FUNCTION SYS
How to use verify_function_11g ?
CREATE PROFILE non_default LIMIT
FAILED_LOGIN_ATTEMPTS 5
PASSWORD_LIFE_TIME 60
PASSWORD_REUSE_TIME 60
PASSWORD_REUSE_MAX 5
PASSWORD_VERIFY_FUNCTION verify_function_11g
PASSWORD_LOCK_TIME 1/24
PASSWORD_GRACE_TIME 10;
Alter user temp_user profile non_default;
SQL> SELECT * FROM dba_profiles WHERE resource_type='PASSWORD' ORDER BY profile;
No comments:
Post a Comment