On password change Old Password is still valid.
774512May 21 2010 — edited May 21 2010Hey Guys,
I am running Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - 64bi.
When I change a password with ALTER USER, it seems that the old password is still valid for a period of time (5 mins or more). Is this a feature in Oracle? Is it documented anywhere? Can you change it at all?
It is possible that this is a feature of the application that I am working with and not a part of oracle, but I don't see how it would work because when I change the password and query the users table I can see that the password hash has changed.
I should also comment that the new password also works right away, so you can enter either the old or new password to login.
Thanks,
Ian