Re: Turn Audit to Monitor Logins
From: Jared Still <jkstill_at_gmail.com>
Date: Fri, 5 Dec 2008 10:45:44 -0800
Message-ID: <bf46380812051045x3c84f171vec985cab78565364@mail.gmail.com>
Date: Fri, 5 Dec 2008 10:45:44 -0800
Message-ID: <bf46380812051045x3c84f171vec985cab78565364@mail.gmail.com>
On Fri, Dec 5, 2008 at 9:27 AM, Nagaraj S <nagaraj.chk_at_gmail.com> wrote:
>
> This audit is intended to find out who logins to the user repeatedly and
> unsuccessfully that caused the account to be locked in more than one
> occasions." Please help me on this
>
A recently discovered (in one of our databases) drawback to auditing logon sessions:
Have you every inadvertently typed your password in to the username field of a form?
Guess what shows up in dba_audit_session.username when that is done to an
oracle
database with logon auditing enabled?
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
-- http://www.freelists.org/webpage/oracle-lReceived on Fri Dec 05 2008 - 12:45:44 CST