Home » RDBMS Server » Security » Ora-28003 When updating user details
Ora-28003 When updating user details [message #214223] Mon, 15 January 2007 08:19 Go to next message
Sham3179
Messages: 6
Registered: January 2007
Junior Member
Hi

I just copied across some users from a oracle 8.1.7. database to a 10g database which has the password verification set up. It did not copy the oracle users across. So I tried creating the oracle user manually and now I get this ora-28003 error. I tried switching that password verification off but still I get the error. Anyone has any idea why this is happening?
Re: Ora-28003 When updating user details [message #214224 is a reply to message #214223] Mon, 15 January 2007 08:26 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
How did you disable the password verify function?
Re: Ora-28003 When updating user details [message #214233 is a reply to message #214224] Mon, 15 January 2007 09:00 Go to previous messageGo to next message
Sham3179
Messages: 6
Registered: January 2007
Junior Member
I set the profile value to NULL.
"alter profile default limit password_verify_function null;"

Another strange thing is that, now after setting this to null, I can create new users. But I cannot update existing users.
Re: Ora-28003 When updating user details [message #214236 is a reply to message #214233] Mon, 15 January 2007 09:02 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
You should set the password_verify_function to UNLIMITED instead of null.
Re: Ora-28003 When updating user details [message #214240 is a reply to message #214223] Mon, 15 January 2007 09:09 Go to previous messageGo to next message
Sham3179
Messages: 6
Registered: January 2007
Junior Member
Could you please explain what is the reason in setting it to UNLIMITED?
Re: Ora-28003 When updating user details [message #214241 is a reply to message #214240] Mon, 15 January 2007 09:16 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
I apologize, the value should indeed be NULL. How were you creating the new users? Were you trying to use the same passwords as in the old database?
Re: Ora-28003 When updating user details [message #214243 is a reply to message #214223] Mon, 15 January 2007 09:19 Go to previous messageGo to next message
Sham3179
Messages: 6
Registered: January 2007
Junior Member
Ok.
In oracle 8.1.7. we had set up to take the user name as the password. So I am trying to do the same here.
Re: Ora-28003 When updating user details [message #214244 is a reply to message #214243] Mon, 15 January 2007 09:27 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
This is on a 9i database:

SQL> conn / as sysdba
Connected.
SQL> @?\rdbms\admin\utlpwdmg.sql

Function created.


Profile altered.

SQL> select profile, resource_name, limit from dba_profiles
  2  where resource_type = 'PASSWORD';

PROFILE    RESOURCE_NAME                    LIMIT
---------- -------------------------------- ------------------------------
DEFAULT    FAILED_LOGIN_ATTEMPTS            3
DEFAULT    PASSWORD_LIFE_TIME               60
DEFAULT    PASSWORD_REUSE_TIME              1800
DEFAULT    PASSWORD_REUSE_MAX               UNLIMITED
DEFAULT    PASSWORD_VERIFY_FUNCTION         VERIFY_FUNCTION
DEFAULT    PASSWORD_LOCK_TIME               .0006
DEFAULT    PASSWORD_GRACE_TIME              10

7 rows selected.

SQL> create user test_user identified by test_user;
create user test_user identified by test_user
*
ERROR at line 1:
ORA-28003: password verification for the specified password failed
ORA-20001: Password same as or similar to user


SQL> alter profile default limit PASSWORD_VERIFY_FUNCTION null;

Profile altered.

SQL> create user test_user identified by test_user;

User created.

Is this similar to the process that you are following?
Re: Ora-28003 When updating user details [message #214245 is a reply to message #214244] Mon, 15 January 2007 09:31 Go to previous messageGo to next message
Sham3179
Messages: 6
Registered: January 2007
Junior Member
yes... so now the new user is created. But I cannot update any already existing users.
Re: Ora-28003 When updating user details [message #214247 is a reply to message #214245] Mon, 15 January 2007 09:39 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
Are the other user's using a different profile?
Re: Ora-28003 When updating user details [message #214253 is a reply to message #214240] Mon, 15 January 2007 09:48 Go to previous messageGo to next message
Mohammad Taj
Messages: 2412
Registered: September 2006
Location: Dubai, UAE
Senior Member

Hi,
Could you please explain what is the reason in setting it to UNLIMITED?
UNLIMITED is wrong value for password_verify_function
go through below link
http://download-uk.oracle.com/docs/cd/B14117_01/server.101/b10759/statements_6010.htm
PASSWORD_VERIFY_FUNCTION






regards
Taj


Re: Ora-28003 When updating user details [message #214255 is a reply to message #214253] Mon, 15 January 2007 09:53 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
user52 wrote on Mon, 15 January 2007 10:48

UNLIMITED is wrong value for password_verify_function


Right...that has already been resolved.
Re: Ora-28003 When updating user details [message #214259 is a reply to message #214247] Mon, 15 January 2007 10:09 Go to previous messageGo to next message
Sham3179
Messages: 6
Registered: January 2007
Junior Member
No Its the same profile!
Re: Ora-28003 When updating user details [message #214260 is a reply to message #214259] Mon, 15 January 2007 10:12 Go to previous messageGo to next message
Mohammad Taj
Messages: 2412
Registered: September 2006
Location: Dubai, UAE
Senior Member

Hi,
what error you getting.
SQL> @c:\oracle\product\10.1.0\db_1\rdbms\admin\utlpwdmg.sql

Function created.


Profile altered.

SQL> alter profile default limit password_verify_function verify_function;

Profile altered.



SQL> create user scott1 identified by scott1;
create user scott1 identified by scott1
*
ERROR at line 1:
ORA-28003: password verification for the specified password failed
ORA-20001: Password same as or similar to user


SQL> create user scott1 identified by scott;


SQL> alter profile default limit password_verify_function null;

Profile altered.


---after edit password_verify_function to NULL i was able to reset scott password.

SQL> alter user scott identified by tiger1;

User altered.

SQL> alter user scott identified by tiger;

User altered.




Taj
Re: Ora-28003 When updating user details [message #214265 is a reply to message #214259] Mon, 15 January 2007 10:44 Go to previous message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
Not sure why you are experiencing the issue you are having. Below is the scenario you are describing (at least the way I'm understanding it) with a current database user.

SQL> select * from v$version;

BANNER
----------------------------------------------------------------
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
PL/SQL Release 10.2.0.1.0 - Production
CORE    10.2.0.1.0      Production
TNS for 32-bit Windows: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production

SQL> conn test_user/test_user
Connected.
SQL> -- As you can see TEST_USER already exists in the database.
SQL> conn / as sysdba
Connected.
SQL> @?\rdbms\admin\utlpwdmg.sql

Function created.


Profile altered.

SQL>  select profile, resource_name, limit from dba_profiles
  2   where resource_type = 'PASSWORD'
  3   and profile = 'DEFAULT';

PROFILE                        RESOURCE_NAME                    LIMIT
------------------------------ -------------------------------- -------------------------
DEFAULT                        FAILED_LOGIN_ATTEMPTS            3
DEFAULT                        PASSWORD_LIFE_TIME               60
DEFAULT                        PASSWORD_REUSE_TIME              1800
DEFAULT                        PASSWORD_REUSE_MAX               UNLIMITED
DEFAULT                        PASSWORD_VERIFY_FUNCTION         VERIFY_FUNCTION
DEFAULT                        PASSWORD_LOCK_TIME               .0006
DEFAULT                        PASSWORD_GRACE_TIME              10

7 rows selected.

SQL> alter user test_user identified by testpass;
alter user test_user identified by testpass
*
ERROR at line 1:
ORA-28003: password verification for the specified password failed
ORA-20003: Password should contain at least one digit, one character and one punctuation


SQL> alter profile default limit PASSWORD_VERIFY_FUNCTION null;

Profile altered.

SQL> alter user test_user identified by testpass;

User altered.

SQL> conn test_user/testpass
Connected.
SQL> -- Existing user can change password that would normally fail verify_function
SQL> alter user test_user identified by test;

User altered.

SQL>
Previous Topic: user creation
Next Topic: ORA-01017
Goto Forum:
  


Current Time: Fri Mar 29 06:37:06 CDT 2024