Shulou(Shulou.com)06/01 Report--

The method of strengthening password policy in Oracle database? Many novices are not very clear about this. In order to help you solve this problem, the following editor will explain it in detail. People with this need can come and learn. I hope you can gain something.

Oracle provides a sql execution file utlpwdmg.sql for password policy by default. The default path for linux/unix is $ORACLE_HOME/rdbms/admin/utlpwdmg.sql. The windows path location can be obtained by search.

First of all, let's take a look at what the password policy settings look like after the default installation of Oracle.

Through the configuration file, we can find that the password length in the current password policy is set to not less than 4 digits. At the same time, the password survival time is 180 days, the password warning time is 7 days, the number of login failures is displayed as 10, and the locking time is 1 minute.

Next, let's test to see if this policy setting script works.

The scott password tiger was changed to 123 successfully, indicating that the utlpwdmg.sql script file was not executed.

Let's re-modify the utlpwdmg.sql configuration and then execute it.

Execute the script:

Then we check to see if the password length and password complexity detection function has been turned on.

There is a picture to know: the new password set to 123 failed, the requirement must be more than 8 digits.

As can be seen from the figure: the new password failed to set to 12345678, which requires at least one number and one letter, indicating that password complexity detection has been enabled.

As you can see from the figure, the default failed_login_attempts value for utlpwdmg.sql has changed from 10 to 5.

To sum up: the utlpwdmg.sql script file is in effect, and some password policies are already in effect.

In fact, the settings for the user's profile can be set separately through the following command:

ALTER PROFILE DEFAULT LIMIT

PASSWORD_LIFE_TIME 180

PASSWORD_GRACE_TIME 7

PASSWORD_REUSE_TIME 100

PASSWORD_REUSE_MAX 200

FAILED_LOGIN_ATTEMPTS 5

PASSWORD_LOCK_TIME 1/1440

Is it helpful for PASSWORD_VERIFY_FUNCTION verify_function_11G; to read the above content? If you want to know more about the relevant knowledge or read more related articles, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.