oracle用户密码规则,Oracle 复杂用户密码规则设置

在ORACLE中默认的密码规则是很宽松的，多么简单的密码都是可以被设置的。但是在一些对安全很敏感的环境下，我们最好开启ORACLE的复杂密码规则的功能。

下面我们来看看默认的ORACLE密码规则是什么样的：

[ora9i@db ora9i]$ sqlplus "/ as sysdba"

SQL*Plus: Release 9.2.0.8.0 - Production on Mon Apr 8 18:57:47 2013

Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.

Connected to:

Oracle9i Enterprise Edition Release 9.2.0.8.0 - Production

With the Partitioning, OLAP and Oracle Data Mining options

JServer Release 9.2.0.8.0 - Production

SQL> select * from dba_profiles where resource_name='PASSWORD_VERIFY_FUNCTION';

PROFILE RESOURCE_NAME RESOURCE LIMIT

------------------------------ -------------------------------- -------- ----------------------------------------

DEFAULT PASSWORD_VERIFY_FUNCTION PASSWORD NULL

PROFILE中的PASSWORD_VERIFY_FUNCTION是对ORACLE用户进行复杂密码规则设置的参数， 参数的值被设置为进行密码规则验证的函数。

ORACLE之前已经为我们提供的一份密码规则蓝本，我们可以根据这个蓝本进行自定义的设置。

[ora9i@db ora9i]$ cat $ORACLE_HOME/rdbms/admin/utlpwdmg.sql

Rem

Rem $Header: utlpwdmg.sql 31-aug-2000.11:00:47 nireland Exp $

Rem

Rem utlpwdmg.sql

Rem

Rem Copyright (c) Oracle Corporation 1996, 2000. All Rights Reserved.

Rem

Rem NAME

Rem utlpwdmg.sql - script for Default Password Resource Limits

Rem

Rem DESCRIPTION

Rem This is a script for enabling the password management features

Rem by setting the default password resource limits.

Rem

Rem NOTES

Rem This file contains a function for minimum checking of password

Rem complexity. This is more of a sample function that the customer

Rem can use to develop the function for actual complexity checks that the

Rem customer wants to mak