URGENT : Password management

Question

Hi
I'm in the position where i am required to put a constraint on the user (eg:scott) where the person that logs in is not allowed to change the password, ie: alter user scott identified by other_password will not be allowed.
Can anyone help me on this? How do I go about doing it?
Thanks

Answer 1

You could invoke password checking by:
1. run the script $ORACLE_HOME/rdbms/admin/utlpwdmg.sql
2. create a custom verify password function in the sys account or alter the default verify_function function so that it will raise an exception depending on your requirements.
3. Create a profile, or alter the default profile like so:
alter profile default password_verify_function = myverify_function;
I am not sure if you want to apply this to all users or some users i.e. schema owner accounts, so you will have to figure out what logic you need to raise the exception, for example (stop user scott from changing his password):
create or replace function myverify_function
(username varchar2,
password varchar2,
old_password varchar2)
return boolean is
n boolean;
begin
if username='SCOTT' then
raise_application_error(-20001, 'User may not change his password');
-- Other password checking as required
return(TRUE);
end;
/