Re: oracle account suddenly change to lock???
From: Gints Plivna <gints.plivna_at_gmail.com>
Date: Sat, 21 Nov 2009 20:22:20 +0200
Message-ID: <6e49b6d00911211022g68f82b98h62ebf564edf2b5e4_at_mail.gmail.com>
2009/11/21 Mark W. Farnham <mwf_at_rsiz.com>:
> do you lock accounts after a certain number of connection attempts that are
> bad?
>
> If so, this can be a symptom of a variety of denial of service attack
Date: Sat, 21 Nov 2009 20:22:20 +0200
Message-ID: <6e49b6d00911211022g68f82b98h62ebf564edf2b5e4_at_mail.gmail.com>
2009/11/21 Mark W. Farnham <mwf_at_rsiz.com>:
> do you lock accounts after a certain number of connection attempts that are
> bad?
>
> If so, this can be a symptom of a variety of denial of service attack
Sometimes it is just simple db user password change without configuring all webservers/whatever else app servers with new password. So they are trying to connect using old password and locking account again and again :)
Of course assuming failed_login_attempts has been set in profiles.
Gints Plivna
http://www.gplivna.eu
-- http://www.freelists.org/webpage/oracle-lReceived on Sat Nov 21 2009 - 12:22:20 CST