Verify password against database

Question

In one of my programs built in Oracle WebDb/PL-SQL i would like the user to be verified as a valid user, by letting him enter his username/password once again, (user is already logged in) without disconnecting users session first.
Is there any way to check if this combination
(username/password) is correct against the database once again ??
null

Answer 1

Jason Judge ([email protected]) wrote an article in the May 2000 issue of Oracle Professional (www.pinpub.com/oracle) that describes a technique of recreating the user and comparing the new encrypted password (which you can access using the DBA_USERS view) with the old one.
If you use a different db for the test there won't be any issues: create the user on the test db, retrieve the encrypted password, delete the user from the test db.
On the same db Jason suggests using mixed case for the user name ('create user "TeStUsEr" identified by test') so that the user you create won't be confused by Oracle for the existing user ('TESTUSER' - uppercase like all objects if created without being quoted).
Jason indicates that the password encryption doesn't depend upon the case.
Good luck!
null