OraFAQ Forum: Server Administration » ORA-28000: the account is locked

Home » RDBMS Server » Server Administration » ORA-28000: the account is locked - how to investigate it ?

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

ORA-28000: the account is locked - how to investigate it ? [message #675496]

Tue, 02 April 2019 07:58

a100
Messages: 34
Registered: March 2019

Member

Hi all,
I got the following error while trying to connect to remote DB with a script:

Code: [Select all] [Show/ hide]

ORA-28000: the account is locked

How do I investigate what caused this lock ?

Report message to a moderator

Re: ORA-28000: the account is locked - how to investigate it ? [message #675497 is a reply to message #675496]

Tue, 02 April 2019 08:09

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

I can only think of 2 ways an account gets locked.
1) Somebody manually issued SQL to LOCK the account.
2) there were repeated login failures & Oracle locked the account to prevent hacker from breaking into this account.

Report message to a moderator

Re: ORA-28000: the account is locked - how to investigate it ? [message #675498 is a reply to message #675497]

Tue, 02 April 2019 08:43

a100
Messages: 34
Registered: March 2019

Member

Thanks @BlackSwan - will investigate the second option Smile

Report message to a moderator

Re: ORA-28000: the account is locked - how to investigate it ? [message #675499 is a reply to message #675498]

Tue, 02 April 2019 08:55

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

a100 wrote on Tue, 02 April 2019 06:43

Thanks @BlackSwan - will investigate the second option

If the connection requests originated from a remote client over SQL*Net, then listener.log file will show ACCOUNT_NAME in it.

Report message to a moderator

Re: ORA-28000: the account is locked - how to investigate it ? [message #675504 is a reply to message #675496]

Tue, 02 April 2019 11:51

Michel Cadot
Messages: 68756
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Code: [Select all] [Show/ hide]

ORA-28000: the account is locked
 *Cause:   The user has entered wrong password consequently for maximum
           number of times specified by the user's profile parameter
           FAILED_LOGIN_ATTEMPTS, or the DBA has locked the account
 *Action:  Wait for PASSWORD_LOCK_TIME or contact DBA

You can check if this is one case or the other one with the status of the account in DBA_USERS.
If it is the case of "ALTER USER ACCOUNT LOCK" then the status is like "%LOCKED".
If it is the case of bad logins then the status is like "%LOCKED(TIMED)".

Report message to a moderator

Re: ORA-28000: the account is locked - how to investigate it ? [message #675505 is a reply to message #675504]

Tue, 02 April 2019 13:08

JPBoileau
Messages: 88
Registered: September 2017

Member

Also, since it hasn't been mentioned... If you are using OS Authentication, your OS user may be locked out. You'd need to talk to the Sys Admin to see how and why it happened.

JP

Report message to a moderator

Re: ORA-28000: the account is locked - how to investigate it ? [message #676662 is a reply to message #675505]

Sat, 29 June 2019 21:57

Akmmhto
Messages: 38
Registered: September 2018

Member

If audit is enabled , then you can query from dba_audit_trail to find the culprit.

Report message to a moderator

Re: ORA-28000: the account is locked - how to investigate it ? [message #676663 is a reply to message #676662]

Sat, 29 June 2019 22:31

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

Akmmhto wrote on Sat, 29 June 2019 19:57

If audit is enabled , then you can query from dba_audit_trail to find the culprit.

OP last logged onto this forum 2 April so likely won't benefit from advice above any time in the near future.

Report message to a moderator

Re: ORA-28000: the account is locked - how to investigate it ? [message #676678 is a reply to message #676663]

Wed, 03 July 2019 09:49

a100
Messages: 34
Registered: March 2019

Member

But I get e-mails Smile

Report message to a moderator

Previous Topic:	Migration of Oracle Database 11g R2 from 32 bit to 64 bit
Next Topic:	Service name or network name of service icdbXDB in the PDB is invalid or conflicts with an existing

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Thu Apr 17 05:04:01 CDT 2025