Deborah:
I don't have a script, but it should be fairly easy to create.
In pseudo-script:
For all Users
Loop
select current_password, current_profile into temp_var1, temp_var2;
alter user profile default;
alter user identified by username;
select current_password into temp_var3;
if temp_var1 = temp_var3 then
send nasty_gram to user;
end if;
alter user identified by values '&temp_var1';
alter user profile temp_var2;
End loop;
If you're using 8i or above, you can create a PL/SQL block that
performs verification of passwords over and above the validation
process built into Oracle. The one I use even logs the change to
the alert_SID.log file so I can audit password changes.
HTH,
Mike
---
===========================================================================
Michael P. Vergara
Oracle DBA
Guidant Corporation
(909) 914-2304
-----Original Message-----
Sent: Friday, November 09, 2001 8:26 AM
To: Multiple recipients of list ORACLE-L
Hi Everyone,
Can anyone provide/share with me a script that will check the users
password against their username. We are trying to verify that no one is
using his/her username as the password.
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Vergara, Michael (TEM)
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
