Resetting an Oracle User Password - Exercise

This exercise is worth up to 10 points:

• 5 points for resetting the password with a valid ALTER USER statement.
• 5 additional points for expiring the temporary password so that COIN_ADMIN must replace it at the next login.

You administer the COIN PDB. The identity of the person responsible for the COIN_ADMIN account has been verified, but the account password has been lost. A written password list may also have been exposed.

In a production environment, suspected credential exposure should be handled under the organization's incident-response procedure. The account may need to be locked while the event is investigated. This exercise begins after the reset has been authorized and concentrates on the password-reset SQL.

Use an illustrative temporary password in the exercise. Never submit or reuse a real production password.

1. Assume that you are connected to the COIN PDB as an administrator with the ALTER USER system privilege.
2. Write an ALTER USER statement that assigns a temporary password to COIN_ADMIN.
3. For full credit, include PASSWORD EXPIRE in the same statement or issue a second ALTER USER statement that expires the password.

The administrator does not need the old password when changing another user's password with the ALTER USER system privilege. The temporary password must satisfy the password rules enforced by the user's profile.

Use the IDENTIFIED BY clause to assign the temporary password. Use PASSWORD EXPIRE to require a password change at the next login.