Skip to Main Content

APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Password complexity and alert for user to change password

mimi_jonesJan 15 2010 — edited Jan 15 2010
We use Application Express Authentication (APEX 3.1.1, Oracle 10g). My DBA has set the password complexity rules through some interface provided by APEX (I don't have access to this).

I have a couple questions.
1) the password complexity rules do work when the password is changed through the development tool, but my end users can change their password in the application itself (APEX_UTIL.CHANGE_CURRENT_USER_PW) and this does not enforce any complexity rules. Is it possible to apply complexity rules through the application itself?

2) how do I alert a user that their password is about to expire in X days so they can change it before it expires (right now they have to be logged into the application to change a password but if it expired first, they can't log in to change it).

3) the password complexity "rules" are set by a series of flagged options through APEX but there is no option to prevent password reuse (I need to prevent the last 6 versions being reused); how do I do this?
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Feb 12 2010
Added on Jan 15 2010
1 comment
911 views