After running utlpwdmg. SQL, ORA-28003, ORA-20001, ORA-20002, ORA-20003 error, ora20002

After running utlpwdmg. SQL, ORA-28003, ORA-20001, ORA-20002, ORA-20003 error, ora20002

ORA-28003, ORA-20001, ORA-20002, ORA-20003, ORA-20004 error reported after running utlpwdmg. SQL.

Applicable:
Oracle Server-Enterprise Edition-Version 8.1.7.0 and later
Information in this document applies to any platform.
Checked for relevance on 15-Sep-2012

Cause:
Run the utlpwdmg. SQL script to restrict the user's password. The new password enforces the following rules:
1. contains a character, a number, and a punctuation mark.
2. Different from username
3. Unlike the words listed in the password verification function)
4. The password must be at least three characters different from the old one.

The above rules have changed in the New db software. Therefore, we recommend that you check the script in your db version to confirm the detailed rules.

Solution:
Not all customers need or want this security level. You can remove this function using the following method.

1. Connect internal to the database.
2. drop function verify_function;
3. alter profile default limit PASSWORD_VERIFY_FUNCTION null;

In this case, the password can be modified with the 'alter user xyz identified by xyz' command without any errors.

The utlpwdmg. SQL script also modifies the default profile.
The default profile settings is the resource parameter value of The DEFAULT profile when the database is created ).
Before running the script, If you modify these resource parameters and use other parameters, you should restore these values.
If you modified those resource parameters and you were using other parameter values before running the script, you shoshould restore those values.

Before running the script
-------------------------
SQL> SELECT * FROM dba_profiles
2 WHERE profile = 'default'
3 AND resource_type = 'Password ';

PROFILE RESOURCE_NAME RESOURCE LIMIT
-----------------------------------------------------------------------
DEFAULT FAILED_LOGIN_ATTEMPTS PASSWORD UNLIMITED
DEFAULT PASSWORD_LIFE_TIME PASSWORD UNLIMITED
DEFAULT PASSWORD_REUSE_TIME PASSWORD UNLIMITED
DEFAULT PASSWORD_REUSE_MAX PASSWORD UNLIMITED
DEFAULT PASSWORD_VERIFY_FUNCTION PASSWORD UNLIMITED
DEFAULT PASSWORD_LOCK_TIME PASSWORD UNLIMITED
DEFAULT PASSWORD_GRACE_TIME PASSWORD UNLIMITED

After running the script:
------------------------
SQL> SELECT * FROM dba_profiles
2 WHERE profile = 'default'
3 AND resource_type = 'Password ';

PROFILE RESOURCE_NAME RESOURCE LIMIT
----------------------------------------------------------------------------
DEFAULT FAILED_LOGIN_ATTEMPTS PASSWORD 3
DEFAULT PASSWORD_LIFE_TIME PASSWORD 60
DEFAULT PASSWORD_REUSE_TIME PASSWORD 1800.
DEFAULT PASSWORD_REUSE_MAX PASSWORD UNLIMITED
DEFAULT PASSWORD_VERIFY_FUNCTION PASSWORD VERIFY_FUNCTION
DEFAULT PASSWORD_LOCK_TIME PASSWORD. 0006
DEFAULT PASSWORD_GRACE_TIME PASSWORD 10
7 rows selected.

You can restore the default setting by running this script as internal or as sysdba.

SQL> ALTER PROFILE DEFAULT LIMIT
2 PASSWORD_LIFE_TIME UNLIMITED
3 PASSWORD_GRACE_TIME UNLIMITED
4 PASSWORD_REUSE_TIME UNLIMITED
5 PASSWORD_REUSE_MAX UNLIMITED
6 FAILED_LOGIN_ATTEMPTS UNLIMITED
7 PASSWORD_LOCK_TIME UNLIMITED;