Password Complexity, Oracle and Banner

["Geoffrey S. Nathan" <geoffnathan () WAYNE EDU>]

(apologies for cross-posting)

Summary of discussion on problems created by the interaction between
Banner and Oracle password complexity rules:

Virtually all universities that replied to my query responded that the
Oracle password rules do ‘dumb down’ complexity rules that they would
otherwise be using. The majority of those who had grappled with this
decided to catch those of their users for whom the overlap was a problem
and restrict their password character choice. Others remained with two
distinct passwords.

Because Sungard is moving towards ‘single-sign-on’, and channels within
Pipeline will increasingly reach downwards into Banner (and even into
Oracle) it will be difficult to avoid this problem. Currently at Wayne
we will attempt to catch those who both need access to Banner and have a
Pipeline channel that causes passwords to synch, and present them with
the simpler complexity rules. We’ll probably bump up their number of
characters to 10, however.

In the long run, however, this is not good, although some seem to think
Banner 8 will fix it. Or purchasing Oracle Security Package. In any
case, more money.... :-(

Many thanks to
Andy Rivers, Tennessee
Steve Werby, Virginia Commonwealth
Chris Green, UAB
Dan Schwartz, Lehigh
Mark Powell, Minnesota
Randy Marchany, Virginia Tech
David Escalanate, Boston College
Christopher Jones, University of the Fraser Valley
Jim Beechey, Northwood
Michael Carr, New Mexico
Bob Smith, Longwood
Bob Bayn, Utah State

Geoffrey S. Nathan
Computing and Information Technology/English
Wayne State University
+1 313 577-1259/+1 313 577-8406
<geoffnathan () wayne edu>