Compiled Messages: ------------------------------------------------------------ Message no. 431 Posted by Peter Ping Liu (TEC5363PL) on Monday, September 25, 2006 8:51am Subject: Comma "," in Password This week, we have a project dealing with password complexity. In the sampel script, comma (",") is allowed as a part of the password policy. However, in the implementaion, you will find some difficulty to put comma in the password. Anyone can shed some light on how to put a comma in the password if the user desires to? Thanks. ------------------------------------------------------------ Message no. 439[Branch from no. 431] Posted by Daniel Thurston (dsthurston) on Monday, September 25, 2006 8:35pm Subject: Re: Comma "," in Password from: http://asktom.oracle.com/pls/ask/f?p=4950:8:::::F4950_P8_DISPLAYID:595223460734 ------------------------------- I did a special character test using 9.2.0.6 and here's what I found for special characters in passwords: create user bubba identified by "abc~123"; grant create session to bubba; connect bubba/abc~123; drop user bubba; ======================================== These special characters worked ======================================== ! % ^ @ (requires quotes around password when entering password in connect statement) $ * ( ) _ + ~ ` - = [ { ] } \ | ; : ' , < . > / (requires quotes around password when entering password in connect statement) ============================================= I could not find a way to make these 2 work ============================================= & " NOTE: You will also want to consider any scripting implications of the special characters you use. -------------------------------------------------- looks like you just need to put quotes around it. Cheers DanT ------------------------------------------------------------ Message no. 440[Branch from no. 439] Posted by Gnaneshwar Bukka (gbukka) on Monday, September 25, 2006 8:50pm Subject: Re: Comma "," in Password Hi Daniel, So we are supposed to include the password with in quotation marks. That was helpful daniel, thank you. Gnaneshwar Bukka. ------------------------------------------------------------ Message no. 447[Branch from no. 440] Posted by Rhonda Nichols (renichols2) on Thursday, September 28, 2006 2:41pm Subject: Re: Comma "," in Password Very interesting....however, I think it is important to keep in mind the "best practices" and not just the "range of possibilities". This will need to be defined by the security team. -Rhonda ------------------------------------------------------------ Message no. 452[Branch from no. 439] Posted by Paras Pradhan (ppradhan) on Thursday, September 28, 2006 10:20pm Subject: Re: Comma "," in Password What about the escape charatcers? like / \. can we use them ? Paras. ------------------------------------------------------------ Message no. 455[Branch from no. 452] Posted by Ravinder Gaur (rgaur) on Friday, September 29, 2006 3:06am Subject: Re: Comma "," in Password SQL> create user test identified by "Test&Test"; Enter value for test: Test old 1: create user test identified by "Test&Test" new 1: create user test identified by "TestTest" User created. SQL> drop user test; User dropped. SQL> set define off SQL> create user test identified by "Test&Test"; User created. SQL> grant connect to test; Grant succeeded. SQL> connect test/Test&Test Connected. SQL> show user USER is "TEST" ------------------------------------------------------------ Message no. 456[Branch from no. 455] Posted by Ravinder Gaur (rgaur) on Friday, September 29, 2006 3:14am Subject: Re: Comma "," in Password Adding a double quote (") is a little tricky (BTW, Oracle does NOT recommend doing this). I start with a normal user/password and then login as that user and alter the password. The password supplied (shown as asterisks '*' below) is actually Test"Test (a double quote between the 2 Test words) -- SQL> create user test identified by User created. SQL> grant connect to test; Grant succeeded. SQL> connect test/test Connected. SQL> show user USER is "TEST" SQL> password Changing password for TEST Old password: **** New password: ********* Retype new password: ********* Password changed SQL> SQL> connect Test/Test"Test Connected. - Ravi ------------------------------------------------------------ Message no. 458[Branch from no. 439] Posted by Krishnamurth Ashwini (kashwini) on Friday, September 29, 2006 11:30am Subject: Re: Comma "," in Password Yes, it does work when enclosed between quotes. Is there any other option to do this? Ash ------------------------------------------------------------ Message no. 459[Branch from no. 458] Posted by Lakshmikar Padmaraju (lpadmaraju) on Friday, September 29, 2006 3:19pm Subject: Re: Comma "," in Password Ash, That is only way to it. Basic principle is if we have to use reserved words, reserved characters we have to include it in Quotes, so that oracle understands it as non reserved character. But in real world it is always better to avoid using any reserved words. Raju. ------------------------------------------------------------ Message no. 461[Branch from no. 459] Posted by Krishnamurth Ashwini (kashwini) on Friday, September 29, 2006 3:35pm Subject: Re: Comma "," in Password Thanks Raju. Ash ------------------------------------------------------------ Message no. 465[Branch from no. 431] Posted by Sagun Piya (srpiya2) on Friday, September 29, 2006 6:33pm Subject: Re: Comma "," in Password Thanks guys for giving information about what we have to do while entering reserved words or symbols as a password. Sagun ------------------------------------------------------------ Message no. 466[Branch from no. 465] Posted by Naziya Shaik (snaziya) on Friday, September 29, 2006 6:35pm Subject: Re: Comma "," in Password thnks guys, this information was really helpful to figure out about different password obligations Naz ------------------------------------------------------------ Message no. 473[Branch from no. 439] Posted by Suresh Methuku (smethuku) on Saturday, September 30, 2006 12:33pm Subject: Re: Comma "," in Password Thanks for the information dan. It was really helpful. suresh ------------------------------------------------------------ Message no. 475[Branch from no. 459] Posted by Anjana Divakar (adivakar) on Saturday, September 30, 2006 1:49pm Subject: Re: Comma "," in Password Thanks for the information Raju! ------------------------------------------------------------ Message no. 478[Branch from no. 459] Posted by Eric Knuth (elknuth2) on Saturday, September 30, 2006 4:32pm Subject: Re: Comma "," in Password I absolutly agree with never using reserved words in your code. I do have a question on using the single tick ' instead of ". In most coding the will pass the absolute value of the contained value instead of the interpreted value. Have you ever tried this? Thanks Eric ------------------------------------------------------------ Message no. 479[Branch from no. 478] Posted by Eric Knuth (elknuth2) on Saturday, September 30, 2006 4:35pm Subject: Re: Comma "," in Password answered my own question. Single ticks do not work. Eric ------------------------------------------------------------ Message no. 480[Branch from no. 466] Posted by Venkat Munagala (vrmunagala) on Saturday, September 30, 2006 5:31pm Subject: Re: Comma "," in Password Thanks a lot guys for the information. This gave a lot of knowledge on complications of the password. ------------------------------------------------------------