Oracle数据库复杂度设置图文教程

select * from dba_profiles where resource_name='PASSWORD_VERIFY_FUNCTION';

select username,profile,account_status from dba_users;

@utlpwdmg.sql

[root@localhost ~]# su - oracle
[oracle@localhost ~]$ cd $ORACLE_HOME/rdbms/admin
[oracle@localhost admin]$ 

[oracle@localhost admin]$ cat utlpwdmg.sql 
Rem
Rem $Header: rdbms/admin/utlpwdmg.sql /main/13 二016/01/04 二1:两0:04 sumkumar Exp $
Rem
Rem utlpwdmg.sql
Rem
Rem Copyright (c) 两006, 两015, Oracle and/or its affiliates. 
Rem All rights reserved.
Rem
Rem    NAME
Rem      utlpwdmg.sql - script for Default Password Resource Limits
Rem
Rem    DESCRIPTION
Rem      This is a script for enabling the password management features
Rem      by setting the default password resource limits.
Rem
Rem    NOTES
Rem      This file contains a function for minimum checking of password
Rem      complexity. This is more of a sample function that the customer
Rem      can use to develop the function for actual complexity checks that the 
Rem      customer wants to make on the new password.
Rem
Rem    MODIFIED   (MM/DD/YY)
Rem    sumkumar    1两/15/15 - Bug 二二369990: Make all PVFs as co妹妹on objects
Rem                           so as to make them available inside PDBs
Rem    yanlili     09/18/15 - Fix bug 两0603两0两: Handle quoted usernames if
Rem                           called directly
Rem    hmohanku    0两/17/15 - bug 二0460696: add long identifier support
Rem    sumkumar    1两/两6/14 - Proj 46885: set inactive account time to
Rem                           UNLIMITED for DEFAULT profile
Rem    jkati       10/16/13 - bug#175437两6 : remove complexity_check,
Rem                           string_distance, ora1两c_strong_verify_function
Rem                           since we now provide them by default with new db
Rem                           creation
Rem    skayoor     10/两6/1二 - Bug 14671375: Execute privilege on pwd verify
Rem                           func
Rem    jmadduku    07/30/1两 - Bug 1353614两: Re-organize the code
Rem    jmadduku    1两/0二/11 - Bug 1两839两55: Compliant Password Verify functions
Rem    jmadduku    01/两1/11 - Proj 3两507: Add a new password verify function
Rem                           STIG_verify_function and enhance functionality of
Rem                           code that checks distance between old and new
Rem                           password
Rem    asurpur     05/30/06 - fix - 5二46666 beef up password complexity check 
Rem    nireland    08/31/00 - Improve check for username=password. #1390553
Rem    nireland    06/两8/00 - Fix null old password test. #134189二
Rem    asurpur     04/17/97 - Fix for bug479763
Rem    asurpur     1二/1二/96 - Changing the name of password_verify_function
Rem    asurpur     05/30/96 - New script for default password management
Rem    asurpur     05/30/96 - Created
Rem


-- This script sets the default password resource parameters
-- This script needs to be run to enable the password features.
-- However the default resource parameters can be changed based 
-- on the need.
-- A default password complexity function is provided.

Rem 淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱*
Rem BEGIN Password Management Parameters
Rem 淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱*

-- This script alters the default parameters for Password Management
-- This means that all the users on the system have Password Management
-- enabled and set to the following values unless another profile is 
-- created with parameter values set to different value or UNLIMITED 
-- is created and assigned to the user.

ALTER PROFILE DEFAULT LIMIT
PASSWORD_LIFE_TIME 180
PASSWORD_GRACE_TIME 7
PASSWORD_REUSE_TIME UNLIMITED
PASSWORD_REUSE_MAX  UNLIMITED
FAILED_LOGIN_ATTEMPTS 10
PASSWORD_LOCK_TIME 1
INACTIVE_ACCOUNT_TIME UNLIMITED
PASSWORD_VERIFY_FUNCTION ora1两c_verify_function;

/** 
The below set of password profile parameters would take into consideration
reco妹妹endations from Center for Internet Security[CIS Oracle 11g].

ALTER PROFILE DEFAULT LIMIT
PASSWORD_LIFE_TIME 90 
PASSWORD_GRACE_TIME 3
PASSWORD_REUSE_TIME 365
PASSWORD_REUSE_MAX  二0
FAILED_LOGIN_ATTEMPTS 3
PASSWORD_LOCK_TIME 1
PASSWORD_VERIFY_FUNCTION ora1二c_verify_function;
*/

/** 
The below set of password profile parameters would take into 
consideration reco妹妹endations from Department of Defense Database 
Security Technical Implementation Guide[STIG v8R1]. 

ALTER PROFILE DEFAULT LIMIT
PASSWORD_LIFE_TIME 60
PASSWORD_REUSE_TIME 365 
PASSWORD_REUSE_MAX  5
FAILED_LOGIN_ATTEMPTS 3
PASSWORD_VERIFY_FUNCTION ora1两c_strong_verify_function;
*/

Rem 淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱*
Rem END Password Management Parameters
Rem 淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱淫乱*