ORACLE PASSWORD COMPLEXITY

In this article, we will show how to set up things regarding password audits.

For example, your SOX auditor requires the following.

Can we enable the below additional requirements in order to meet company policy?

5 failed login attempts

30 min lockout

90 day expiration

Password history of 8

2 days minimum password age

Thank you!

Sarah

Profiles only work when resource limits are turned on 

Connected to:

Oracle Database 18c Standard Edition 2 Release 18.0.0.0.0 - Production

Version 18.3.0.0.0

SQL> show parameter resource_limit

NAME                                 TYPE        VALUE

------------------------------------ ----------- ------------------------------

resource_limit                       boolean     TRUE

To turn resource_limit  ON

SQL> ALTER SYSTEM SET RESOURCE_LIMIT = TRUE;

System altered.

--Show available profiles

select * from dba_profiles;

select distinct profile from dba_profiles;

--How to create a profile

CREATE PROFILE skull_profile LIMIT

FAILED_LOGIN_ATTEMPTS 5

PASSWORD_LOCK_TIME 30/1440

PASSWORD_LIFE_TIME 90

PASSWORD_REUSE_MAX 8

PASSWORD_VERIFY_FUNCTION ora12c_stig_verify_function;

CASE 1 New USER;

SQL> create user dav4635 identified by Administration$01 profile test profile;

CASE 2 Exisiting USER;

SQL> alter user dav4635 profile test_profile;

User altered.

For this one 

2 days minimum password age

see how to customize password complexity