When a user's password is expired, they get prompted to change this on logon. If the new password is different from the verify password only in case, then this passes verification and customer can login. When the user logs in again it's the 'Verify' password that has been stored as the new password so when they use the password they think it should be i.e. the one they put in the 'New Password' dialog, they get
"ORA-01017: Invalid username/password"
Steps to replicate:
1. In an 11g database expire a user account
2. Login using an 11g Client as that user and a dialog box will appear
3. Enter 'test' in the 'new password' box
4. Enter 'Test' in the 'verify' box
5. The verification will NOT fail (it does if you do the same in SB | 'ALTER USER')
6. Log out and login with password 'test' - fail
7. Log out/in with password 'Test' - login successful
So the password that is being set is the 'Verify' strin, which is incorrect due to the case.
You need to be signed in and under a current maintenance contract to view premium knowledge articles.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center