"ORA-01017: Invalid username/password" after having changed password for an 11g user using an 11g (4310668)

When a user's password is expired, they get prompted to change this on logon. If the new password is different from the verify password only in case, then this passes verification and customer can login. When the user logs in again it's the 'Verify' password that has been stored as the new password so when they use the password they think it should be i.e. the one they put in the 'New Password' dialog, they get

"ORA-01017: Invalid username/password"

Steps to replicate:

1. In an 11g database expire a user account
2. Login using an 11g Client as that user and a dialog box will appear
3. Enter 'test' in the 'new password' box
4. Enter 'Test' in the 'verify' box
5. The verification will NOT fail (it does if you do the same in SB | 'ALTER USER')
6. Log out and login with password 'test' - fail
7. Log out/in with password 'Test' - login successful

So the password that is being set is the 'Verify' strin, which is incorrect due to the case.

WORKAROUND

Change password ensuring that the 'New Password' and 'Verify' password match exactly in terms of characters and case.


STATUS

Waiting for fix in a future release of Toad for Oracle