oracle self service password reset

[LCPSWolf]

We recently adopted a new SIS based on Oracle. While we did not write the coding for the database, we are allowed to add in features...but no one in our department knows Oracle.

 

Basically, I'm looking for a self service password reset that I can create and post via our web server. Any tips on good Oracle coding books or thoughts as to how realistic this goal is would be great.

 

I realized today, on my 15th password reset due to lockout, that this was something I needed to change. (Our password policy is 3 tries, lockout, no timeout. And no, without giving full admin rights to the database, password resets cannot be delegated. We already asked

 

I'd love some ideas! Thanks as always - you guys are all awesome.

[plexer]

we've allready produced sspr for ad maybe it could be adapted/extended?

[pcstru]

Any tips on good Oracle coding books or thoughts as to how realistic this goal is would be great.

 

[ame=http://www.amazon.com/Oracle-Database-10g-Complete-Reference/dp/0072253517/ref=sr_1_2?ie=UTF8&s=books&qid=1253876493&sr=1-2]Amazon.com: Oracle Database 10g: The Complete Reference (Osborne ORACLE Press Series) (0783254043381): Kevin Loney, Kevin Loney: Books[/ame]

 

 

And for backend PL/SQL development

 

[ame=http://www.amazon.com/Oracle-Database-10g-SQL-Programming/dp/0072230665/ref=pd_bxgy_b_img_c]Amazon.com: Oracle Database 10g PL/SQL Programming (0783254042735): Scott Urman, Ron Hardman, Michael McLaughlin: Books[/ame]

[gunny1979]

Hi Wolf,

 

I have recently completed a project where I implemented a Self Service Password reset function, this is based on tables within oracle itself storing the user details. Please advise if these details are helcd elsewhere, if your using LDAP et

 

Do you have access to the DB via SQL and can you implement new forms to the app, amend exisiting?

 

If so you can add a new package into the DB via SQLPLUS, using a simalr code below:

 

CREATE OR REPLACE PACKAGE  "SELF_PWDRESET_PKG" 
AS

PROCEDURE change_password (p_username      IN  VARCHAR2,
                            p_old_password  IN  VARCHAR2,
                            p_new_password  IN  VARCHAR2);
END SELF_PWDRESET_PKG;
/

CREATE OR REPLACE PACKAGE BODY  "SELF_PWDRESET_PKG" 
AS

PROCEDURE change_password (p_username      IN  VARCHAR2,
                            p_old_password  IN  VARCHAR2,
                            p_new_password  IN  VARCHAR2) AS
   v_rowid  ROWID;
 BEGIN
   SELECT rowid
   INTO   v_rowid
   FROM   [b]Table that stores Users[/b]
   WHERE  username = UPPER(p_username)
   AND    password = [b]NOTE[/b](p_username, p_old_password)
   FOR UPDATE;

   UPDATE [b]Table that stores Users[/b]
   SET    password = [b]NOTE[/b](p_username, p_new_password)
   WHERE  rowid    = v_rowid;

   COMMIT;
 EXCEPTION
   WHEN NO_DATA_FOUND THEN
     RAISE_APPLICATION_ERROR(-20000, 'Invalid username/password.');
 END;

END SELF_PWDRESET_PKG;
/

 

You can then create a new page from the added process, which will have the relevant fileds created.

 

Add a link to the logon page to this new page, and configure the to set the USERNAME entered into the Log in field as the USERNAME in the reset password field on the reset password page, and have this field view only.

***Please note I would imagine that all users passwords in the database are hashed for security reasons, in order for the above code to work you will need to know the hash procedure within the database an enter this into the code where it says note above***

[Duane]

Above given information is really helpful especially for newbies who wants to retrieve the multidimensional data from sql 2005.

I would also recommend a book on OLAP and believe me its pretty informative.

The [ame=http://www.amazon.com/Multidimensional-Data-Modeling-Toolkit-Intelligence/dp/0981775306]book is available on Amazon [/ame] & you can buy an e-book directly from the publisher by writing [email protected].