| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: Looking for suggestions...
I am assuming that we are talking about application authenticated users
here, rather than Oracle database users, so there is a table with user
names, lock status, etc.
I would create a trigger on PSOPRDEFN that fires when ACCTLOCK is set to 1 and schedules a job (via dbms_job) to unlock that account after 30 minutes.
Justin Cave
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC
-----Original Message-----
From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org]
On Behalf Of Mary Benson
Sent: Friday, June 11, 2004 7:31 AM
To: Oracle-L_at_freelists.org
Subject: Looking for suggestions...
We got the following request from our HR technical team. Has anyone done anything similar or have any reccomendations?
REQUEST:
"As part of the security review of the Self Service application, we need to
institute an account lock-out after 5 unsuccessful attempts when
requesting a new password. Additionally, the requirement calls for us
to reset the lock-out after 30 minutes. We can set the lock-out, but we
have no way to reset the lock-out after 30 minutes through the application,
but thought there could be a way to do this at the Oracle level, like a
database agent.
To do this, the agent would need to run against the PSOPRDEFN table, and check the value of LASTUPDDTTM (date/time stamp). If 30 minutes have elapsed and the value of ACCTLOCK = 1, then reset the ACCTLOCK to 0."
Thanks.
Mary Benson
Database Admin.
Tufts University
 |
 |