Question:  How do I ensure that an end-users Oracle password is at least five characters long?  I am trying to check the password parameter setup for password length required for password creation. I cannot find the info in the DBA_PROFILE.

Answer:  Oracle has a password checker function called $ORACLE_HOME/rdbms/admin/utlpwdmg.sql, which needs to be run manually.  The utlpwdmg.sql script has a password_verify_password function that ensures that the password length is at least 4 characters, but you can  modify it manually. 

To enable password length checking inside the password_verify_function, alter the user profile as follows:

In addition to forcing a minimum password length, the utlpwdmg.sql script forces password aging, it will lock the user after three failed password attempts and check for password reuse.

For more details on managing a password length, see MOSC document 114930.1 and 207959.1.
 

Verifying password length within Oracle Applications

Within Oracle Applications (Oracle Financials, eBusiness Suite), you are not manipulating Oracle database user ID's.  In Oracle apps, you can adjust the user profile option "Signon Password Length" for setting the minimum length of an Oracle apps password.