Wednesday, September 23, 2009

Examples of PASSWORD_REUSE_MAX and PASSWORD_REUSE_TIME Used Together

Symptoms:

ORA-28007: the password cannot be reused


9i(and above) Behaviour

a. If both PASSWORD_REUSE_MAX and PASSWORD_REUSE_TIME are unlimited, it means
that this parameter is ignored.
This is so for the backward compatibility also.

b. If PASSWORD_REUSE_MAX is set to 10 and PASSWORD_REUSE_TIME is set to
UNLIMITED, the user can never reuse his/her password.

c. If PASSWORD_REUSE_TIME is set to 1 month and PASSWORD_REUSE_MAX is set to
UNLIMITED, the user can never reuse his/her password

d. If PASSWORD_REUSE_TIME is set to 1 month and PASSWORD_REUSE_MAX is set to 10,
the user is allowed to reuse his/her password after 1 month if the user has
changed the password 10 times

8i Behavior

If either PASSWORD_REUSE_TIME or PASSWORD_REUSE_MAX is set to unlimited, the
password can be reused whichever command you use, SQL*Plus command
PASSWORD or SQL ALTER USER ...IDENTIFIED by.

Reference:

Oracle notes: 228991.1