Changing Password

[Ahmed M. AlShafiy]

please can any one show me how to force the system to accept the password as the login ID.


coz i want oracle user name have the same password oracle

[Steven E. Protter]

Shalom Ahmed,

Set the password as the root user.

As bad as this is, the root user can do this.

SEP

[Ahmed M. AlShafiy]

i want like this:

username: oracle
password: oracle


i tey to do it from root user but it not accepted, how i can force it to do it?

[Victor Fridyev]

Hi,

AFAIK, HPUX itself does not permit to set passwors from a script, like LINUX, but you can use a language called EXPECT http://expect.nist.gov .
As a workaround you can set requested password interactively, remember it and insert the encrypted password into /etc/passwd file. This is not beatiful, not secure, but works.

HTH

[James R. Ferguson]

Hi Ahmed:

As noted, setting the password of an account to the same character string as the account name doesn't provide good security.

However, to do this, login as root and type:

# passwd oracle
[ when prompted for the password, type "oracle" ]

You will be asked to specify it again, so do so.

Regards!

...JRF...

[Jim Mallett]

Even as root I sometimes have issues changing users passwords to something that doesn't conform to our security standards. To get around this, instead of using /usr/bin/passwd I use /sbin/password
My systems are down for maintenance right now or I would check the man page to see the difference, if there is one.

As James/Steve mentioned though, it is not good practice. Especially having the user/pass the same.

Jim

[Bill Hassell]

I'll be more forceful about trivial passwords: it is a BAD idea. You might as well have no password at all because everyone in your company can login as oracle and look at (or corrupt) data that is critical to your company. Even if all your employees are trustworthy, a novice user might 'experiment' with Oracle commands and accidently destroy the database. There are really good reasons not to allow trivial passwords.

[Rick Garland]

The root user can do anything needed or wanted, including changing passwds of other user accounts. If you want oracle to have passwd of oracle, use the root use to make the change.

Depending on security level and configurations, root may be responsible for changing or setting the passwds.

In this case, oracle has 5 characters and no numerics. If there are security policies in place, only root can invoke the changes you request.

Last thing, very bad idea to have passwd same as acct name. This is often called a "joe" account This is something that is tried 1st when seeking unauthorized access to a system. As stated, avoid "joe" accts.

[Ahmed M. AlShafiy]

Thanks All