So you mean we have to make our little web form a little more smarter to be able to accept requests from oracle.

I am the dba, and I don't know what I can do from the database side to help this. All of this happens right when the user is tryig to connect.

One thing I have found that I can do is this:

Since the web form simply passes a command string, like "sqlplus username/old_password@connect_string"...

We can simply add this at the end: < passwd.txt

In other words:

sqlplus username/old_password@connect_string < passwd.txt

And the contents of passwd.txt is simply this 2 lines:

new_password
new_password

This would essentially take care of responding to the database request to changed the expired password.

I'm wondering if there are any other arguments that sqlplus accepts at the command line that would make this more easier??