OraFAQ Forum: Security » Locked Accounts

Home » RDBMS Server » Security » Locked Accounts

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Locked Accounts [message #153857]

Wed, 04 January 2006 07:49

matrik02
Messages: 64
Registered: November 2005

Member

I want to do like this .After 3 failed login attempts, Oracle places a lock on the user's account. How to do that? I am a DBA sys user and have password for database.Hope some one can give an idea.. Thanks

Report message to a moderator

Re: Locked Accounts [message #153860 is a reply to message #153857]

Wed, 04 January 2006 08:15

wpaillan
Messages: 35
Registered: March 2005
Location: Santiago - Chile

Member

Hello
You need to create, a profile with certain characteristics

And next adding this prolile to the user

There are several examples here:

http://download-west.oracle.com/docs/cd/B10501_01/server.920/a96540/statements_611a.htm#2066204
-------

Examples
-------------

****** lock user opcion
--
CREATE PROFILE prof LIMIT
FAILED_LOGIN_ATTEMPTS 4
PASSWORD_LOCK_TIME 30;

ALTER USER ashwini PROFILE prof;
--
CREATE PROFILE prof LIMIT
FAILED_LOGIN_ATTEMPTS 4
PASSWORD_LOCK_TIME 30
PASSWORD_LIFE_TIME 90;

ALTER USER ashwini PROFILE prof;
--
CREATE PROFILE prof LIMIT
FAILED_LOGIN_ATTEMPTS 4
PASSWORD_LOCK_TIME 30
PASSWORD_LIFE_TIME 90
PASSWORD_GRACE_TIME 3;

ALTER USER ashwini PROFILE prof;
--
CREATE USER jbrown
IDENTIFIED BY zX83yT
...
PASSWORD EXPIRE;

CREATE PROFILE prof LIMIT
PASSWORD_REUSE_TIME 60
PASSWORD_REUSE_MAX UNLIMITED;

CREATE PROFILE prof LIMIT
PASSWORD_REUSE_MAX 3
PASSWORD_REUSE_TIME UNLIMITED;

------------------------------------
--Stops, to unblock users
ALTER USER ashwini ACCOUNT UNLOCK;

Greetings

williams

Report message to a moderator

Re: Locked Accounts [message #157424 is a reply to message #153860]

Thu, 02 February 2006 06:36

AJindal
Messages: 2
Registered: February 2006
Location: India

Junior Member

So this simple thing:

Create a profile like this:
Create or Replace Profile profilename
limit FAILED_LOGIN_ATTEMPTS 3

Then assign this profile to your user like:
Alter user username profile profilename

Thats it.

I hope it'll make some sense for you.

Thanks
Anshu

Report message to a moderator

Previous Topic:	Hash Value for Passwords Stored in Oracle
Next Topic:	Wanted to display Customized error messages instead of Oracle default messages

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Wed Jan 08 20:12:47 CST 2025