Most of the links for this are quite old and say that you need an oracle client to be able to reset expired passwords, due to limitations in the JDBC driver.
Has there been any movement on this (or any prospect of any movement?)