{"id":15405,"date":"2020-12-11T17:21:22","date_gmt":"2020-12-11T16:21:22","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/"},"modified":"2023-06-20T10:10:47","modified_gmt":"2023-06-20T08:10:47","slug":"oracle-21c-security-mandatory-profile","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/","title":{"rendered":"Oracle 21c Security : Mandatory Profile"},"content":{"rendered":"

By Mouhamadou Diaw<\/strong><\/p>\n

With Oracle 21c, it is now possible to enforce a password policy (length, number of digits\u2026) for all pluggable databases or for specific pluggable databases via profiles. This is done by creating a mandatory profile in the root CDB and this profile will be attached to corresponding PDBs.
\nThe mandatory profile is a generic profile that can only have a single parameter, the PASSWORD_VERIFY_FUNCTION.
\nThe password complexity verification function of the mandatory profile is checked before the password complexity function that is associated with the user account profile.
\nFor example, the password length defined in the mandatory profile will take precedence on any other password length defined in any other profile associated to the user.
\nWhen defined the limit of the mandatory profile will be enforced in addition to the limits of the actual profile of the user.
\nA mandatory profile cannot be assigned to a user but should attached to a PDB<\/p>\n

In this demonstration we will consider a instance DB21 with 3 PDB
\n-PDB1
\n-PDB2
\n-PDB3<\/p>\n

We will create 2 mandatory profiles:
\nc##mand_profile_pdb1_pdb2 which will be assigned to PDB1 and PDB2
\nc##mand_profile_pdb3 which will be assigned to PDB3<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n<\/td>\n
\n
\n
SQL> show pdbs;<\/code><\/div>\n
<\/div>\n
\u00a0\u00a0\u00a0\u00a0<\/code>CON_ID CON_NAME\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/code>OPEN<\/code> MODE\u00a0 RESTRICTED<\/code><\/div>\n
---------- ------------------------------ ---------- ----------<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>2 PDB$SEED\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/code>READ<\/code> ONLY<\/code>\u00a0 NO<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>3 PDB1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/code>READ<\/code> WRITE <\/code>NO<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>4 PDB2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/code>READ<\/code> WRITE <\/code>NO<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>5 PDB3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/code>READ<\/code> WRITE <\/code>NO<\/code><\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

We will create two verification functions in the root container that we will associate to our mandatory profiles. The first function will check for a password length to 6<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n<\/td>\n
\n
\n
SQL> <\/code>CREATE<\/code> OR<\/code> REPLACE<\/code> FUNCTION<\/code> func_pdb1_2_verify_function<\/code><\/div>\n
\u00a0<\/code>( username\u00a0\u00a0\u00a0\u00a0 varchar2,<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>password<\/code>\u00a0\u00a0\u00a0\u00a0 varchar2,<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>old_password varchar2)<\/code><\/div>\n
\u00a0<\/code>return<\/code> boolean <\/code>IS<\/code><\/div>\n
BEGIN<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>if <\/code>not<\/code> ora_complexity_check(<\/code>password<\/code>, chars => 6) <\/code>then<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>return<\/code>(<\/code>false<\/code>);<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>end<\/code> if;<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>return<\/code>(<\/code>true<\/code>);<\/code><\/div>\n
END<\/code>;<\/code><\/div>\n
\/\u00a0 <\/code><\/div>\n
<\/div>\n
Function<\/code> created.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

The second function will check for a password length to 10<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n<\/td>\n
\n
\n
SQL> <\/code>CREATE<\/code> OR<\/code> REPLACE<\/code> FUNCTION<\/code> func_pdb3_verify_function<\/code><\/div>\n
\u00a0<\/code>( username\u00a0\u00a0\u00a0\u00a0 varchar2,<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>password<\/code>\u00a0\u00a0\u00a0\u00a0 varchar2,<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>old_password varchar2)<\/code><\/div>\n
\u00a0<\/code>return<\/code> boolean <\/code>IS<\/code><\/div>\n
BEGIN<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>if <\/code>not<\/code> ora_complexity_check(<\/code>password<\/code>, chars => 10) <\/code>then<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>return<\/code>(<\/code>false<\/code>);<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>end<\/code> if;<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>return<\/code>(<\/code>true<\/code>);<\/code><\/div>\n
END<\/code>;<\/code><\/div>\n
\/ <\/code><\/div>\n
<\/div>\n
Function<\/code> created.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Now let\u2019s create the two mandatory profiles in the root container<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n<\/td>\n
\n
\n
SQL><\/code><\/div>\n
CREATE<\/code> MANDATORY PROFILE c##mand_profile_pdb1_pdb2<\/code><\/div>\n
LIMIT PASSWORD_VERIFY_FUNCTION func_pdb1_2_verify_function<\/code><\/div>\n
CONTAINER = <\/code>ALL<\/code>;<\/code><\/div>\n
<\/div>\n
Profile created.<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Remember that we want to associate the mandatoty profile c##mand_profile_pdb1_pdb2 to PDB1 and PDB2. So we can first attach this profile to all PDBs<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n<\/td>\n
\n
\n
SQL> <\/code>CREATE<\/code> MANDATORY PROFILE c##mand_profile_pdb3<\/code><\/div>\n
LIMIT PASSWORD_VERIFY_FUNCTION func_pdb3_verify_function<\/code><\/div>\n
CONTAINER = <\/code>ALL<\/code>;\u00a0 <\/code><\/div>\n
<\/div>\n
Profile created.<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Remember that we want to associate the mandatoty profile c##mand_profile_pdb1_pdb2 to PDB1 and PDB2. So we can first attach this profile to all PDBs<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n<\/td>\n
\n
\n
SQL> show con_name;<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
CDB$ROOT<\/code><\/div>\n
<\/div>\n
SQL> <\/code>alter<\/code> system <\/code>set<\/code> mandatory_user_profile=c##mand_profile_pdb1_pdb2;<\/code><\/div>\n
<\/div>\n
System altered.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

To associate the profile c##mand_profile_pdb3 to PDB3, we can edit the spfile of PDB3<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n<\/td>\n
\n
\n
SQL> show con_name;<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB3<\/code><\/div>\n
SQL>\u00a0 <\/code>alter<\/code> system <\/code>set<\/code> mandatory_user_profile=c##mand_profile_pdb3;<\/code><\/div>\n
<\/div>\n
System altered.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

We can then verify the different values of the parameter MANDATORY_USER_PROFILE in the different PDBs<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n
17<\/div>\n
18<\/div>\n
19<\/div>\n
20<\/div>\n
21<\/div>\n
22<\/div>\n
23<\/div>\n
24<\/div>\n
25<\/div>\n
26<\/div>\n
27<\/div>\n
28<\/div>\n
29<\/div>\n
30<\/div>\n
31<\/div>\n
32<\/div>\n
33<\/div>\n<\/td>\n
\n
\n
SQL> show con_name;<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB3<\/code><\/div>\n
SQL>\u00a0 <\/code>alter<\/code> system <\/code>set<\/code> mandatory_user_profile=c##mand_profile_pdb3;<\/code><\/div>\n
<\/div>\n
System altered.<\/code><\/div>\n
<\/div>\n
SQL> show parameter mandatory;<\/code><\/div>\n
<\/div>\n
NAME<\/code>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 TYPE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 VALUE<\/code><\/div>\n
------------------------------------ ----------- ------------------------------<\/code><\/div>\n
mandatory_user_profile\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 string\u00a0\u00a0\u00a0\u00a0\u00a0 C##MAND_PROFILE_PDB3<\/code><\/div>\n
SQL> <\/code>alter<\/code> session <\/code>set<\/code> container=PDB1;<\/code><\/div>\n
<\/div>\n
Session altered.<\/code><\/div>\n
<\/div>\n
SQL> show parameter mandatory;<\/code><\/div>\n
<\/div>\n
NAME<\/code>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 TYPE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 VALUE<\/code><\/div>\n
------------------------------------ ----------- ------------------------------<\/code><\/div>\n
mandatory_user_profile\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 string\u00a0\u00a0\u00a0\u00a0\u00a0 C##MAND_PROFILE_PDB1_PDB2<\/code><\/div>\n
SQL>\u00a0 <\/code>alter<\/code> session <\/code>set<\/code> container=PDB2;<\/code><\/div>\n
<\/div>\n
Session altered.<\/code><\/div>\n
<\/div>\n
SQL> show parameter mandatory;<\/code><\/div>\n
<\/div>\n
NAME<\/code>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 TYPE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 VALUE<\/code><\/div>\n
------------------------------------ ----------- ------------------------------<\/code><\/div>\n
mandatory_user_profile\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 string\u00a0\u00a0\u00a0\u00a0\u00a0 C##MAND_PROFILE_PDB1_PDB2<\/code><\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

To test we will try to create a user in PDB3 for example with with a password length < 10<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n<\/td>\n
\n
\n
SQL> <\/code>create<\/code> user<\/code> toto identified <\/code>by<\/code> \"DGDTr##5\"<\/code>;<\/code><\/div>\n
create<\/code> user<\/code> toto identified <\/code>by<\/code> \"DGDTr##5\"<\/code><\/div>\n
*<\/code><\/div>\n
ERROR <\/code>at<\/code> line 1:<\/code><\/div>\n
ORA-28219: <\/code>password<\/code> verification failed <\/code>for<\/code> mandatory profile<\/code><\/div>\n
ORA-20000: <\/code>password<\/code> length less than 10 characters<\/code><\/div>\n
<\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

By Mouhamadou Diaw With Oracle 21c, it is now possible to enforce a password policy (length, number of digits\u2026) for all pluggable databases or for specific pluggable databases via profiles. This is done by creating a mandatory profile in the root CDB and this profile will be attached to corresponding PDBs. The mandatory profile is […]<\/p>\n","protected":false},"author":27,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229,198,59,149],"tags":[137,2212,2213,2214,1384],"type_dbi":[],"class_list":["post-15405","post","type-post","status-publish","format-standard","hentry","category-database-administration-monitoring","category-database-management","category-oracle","category-security","tag-oracle-21c","tag-oracle-mandatory-profile","tag-oracle-password-length","tag-oracle-password-policy","tag-oracle-security"],"acf":[],"yoast_head":"\nOracle 21c Security : Mandatory Profile - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Oracle 21c Security : Mandatory Profile\" \/>\n<meta property=\"og:description\" content=\"By Mouhamadou Diaw With Oracle 21c, it is now possible to enforce a password policy (length, number of digits\u2026) for all pluggable databases or for specific pluggable databases via profiles. This is done by creating a mandatory profile in the root CDB and this profile will be attached to corresponding PDBs. The mandatory profile is […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2020-12-11T16:21:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-20T08:10:47+00:00\" \/>\n<meta name=\"author\" content=\"Oracle Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oracle Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/\"},\"author\":{\"name\":\"Oracle Team\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"headline\":\"Oracle 21c Security : Mandatory Profile\",\"datePublished\":\"2020-12-11T16:21:22+00:00\",\"dateModified\":\"2023-06-20T08:10:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/\"},\"wordCount\":364,\"commentCount\":0,\"keywords\":[\"Oracle 21C\",\"Oracle Mandatory Profile\",\"Oracle password length\",\"Oracle password policy\",\"oracle security\"],\"articleSection\":[\"Database Administration & Monitoring\",\"Database management\",\"Oracle\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/\",\"name\":\"Oracle 21c Security : Mandatory Profile - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"datePublished\":\"2020-12-11T16:21:22+00:00\",\"dateModified\":\"2023-06-20T08:10:47+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Oracle 21c Security : Mandatory Profile\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\",\"name\":\"Oracle Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"caption\":\"Oracle Team\"},\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Oracle 21c Security : Mandatory Profile - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/","og_locale":"en_US","og_type":"article","og_title":"Oracle 21c Security : Mandatory Profile","og_description":"By Mouhamadou Diaw With Oracle 21c, it is now possible to enforce a password policy (length, number of digits\u2026) for all pluggable databases or for specific pluggable databases via profiles. This is done by creating a mandatory profile in the root CDB and this profile will be attached to corresponding PDBs. The mandatory profile is […]","og_url":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/","og_site_name":"dbi Blog","article_published_time":"2020-12-11T16:21:22+00:00","article_modified_time":"2023-06-20T08:10:47+00:00","author":"Oracle Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Oracle Team","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/"},"author":{"name":"Oracle Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"headline":"Oracle 21c Security : Mandatory Profile","datePublished":"2020-12-11T16:21:22+00:00","dateModified":"2023-06-20T08:10:47+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/"},"wordCount":364,"commentCount":0,"keywords":["Oracle 21C","Oracle Mandatory Profile","Oracle password length","Oracle password policy","oracle security"],"articleSection":["Database Administration & Monitoring","Database management","Oracle","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/","url":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/","name":"Oracle 21c Security : Mandatory Profile - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2020-12-11T16:21:22+00:00","dateModified":"2023-06-20T08:10:47+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-21c-security-mandatory-profile\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Oracle 21c Security : Mandatory Profile"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee","name":"Oracle Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","caption":"Oracle Team"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/15405","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=15405"}],"version-history":[{"count":1,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/15405\/revisions"}],"predecessor-version":[{"id":26131,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/15405\/revisions\/26131"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=15405"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=15405"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=15405"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=15405"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}