topic Change Oracle user password !! in Operating System - HP-UX

Change Oracle user password !!

Chris Fung — Sun, 16 Jun 2002 15:44:41 GMT

Hi all,

If the oracle accounts do not "identified externally" therefore not using native operating system password to login oracle. How can the user change their password?? They need to issue "alter user identified by ;" to change their password !!

From the security point of view, is that granting "alter user" privilege to the normal user will allow them not only can change his/her password but also the others?? If yes, any other alternative solution to this issue.

Many thanks,

Chris,

Re: Change Oracle user password !!

A. Clay Stephenson — Sun, 16 Jun 2002 18:14:32 GMT

A regular user (ted) can change his own password but if he attempts to 'alter user fred identified by cookie;' he will get an 'insufficient privilege' error from sqlplus.

Re: Change Oracle user password !!

Aashish Raj — Sun, 16 Jun 2002 18:30:40 GMT

With oracle 8i, the user can use password command to change the password.

Yes, if you grant alter user privilege, that user can change other users passwords also .

Thanks
AR

Re: Change Oracle user password !!

Yogeeraj_1 — Mon, 17 Jun 2002 04:16:33 GMT

hello,

if you are using Oracle 8i, you can create a procedure and grant execute on the procedure to users that are allowed to change password.

In the procedure you would use "execute_immediate()" to run the appropriate 'alter user $U identified by values ''$P''';
This applies to normal users.

Then for your superusers, you just grant them the "alter user" privilege if you want.

Hope this helps.

best regards
yogeeraj

Re: Change Oracle user password !!

Shirish Joshi — Mon, 17 Jun 2002 04:34:02 GMT

Hi Chris,
Any user with a 'CONNECT' privilege can change his/her password i.e. issue the 'ALTER USER identified by .

To enable changing other users authorization/resource privilege, the 'ALTER USER' privilege is required.

Regards,
Shirish