Home » RDBMS Server » Security » Password History (Oracle 10g, AIX)
Password History [message #482242] Wed, 10 November 2010 09:44 Go to next message
amateur
Messages: 2
Registered: November 2010
Location: HK
Junior Member
Hi,
Is there a way to see who or when password was changed for SYS or SYSTEM account?

thanks!
Re: Password History [message #482243 is a reply to message #482242] Wed, 10 November 2010 09:46 Go to previous messageGo to next message
BlackSwan
Messages: 22520
Registered: January 2009
Senior Member
PTIME shows when password was last changed.
sqlplus

SQL*Plus: Release 11.2.0.1.0 Production on Wed Nov 10 07:45:20 2010

Copyright (c) 1982, 2009, Oracle.  All rights reserved.

Enter user-name: / as sysdba

Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL> desc user$
 Name					   Null?    Type
 ----------------------------------------- -------- ----------------------------
 USER#					   NOT NULL NUMBER
 NAME					   NOT NULL VARCHAR2(30)
 TYPE#					   NOT NULL NUMBER
 PASSWORD					    VARCHAR2(30)
 DATATS#				   NOT NULL NUMBER
 TEMPTS#				   NOT NULL NUMBER
 CTIME					   NOT NULL DATE
 PTIME						    DATE
 EXPTIME					    DATE
 LTIME						    DATE
 RESOURCE$				   NOT NULL NUMBER
 AUDIT$ 					    VARCHAR2(38)
 DEFROLE				   NOT NULL NUMBER
 DEFGRP#					    NUMBER
 DEFGRP_SEQ#					    NUMBER
 ASTATUS				   NOT NULL NUMBER
 LCOUNT 				   NOT NULL NUMBER
 DEFSCHCLASS					    VARCHAR2(30)
 EXT_USERNAME					    VARCHAR2(4000)
 SPARE1 					    NUMBER
 SPARE2 					    NUMBER
 SPARE3 					    NUMBER
 SPARE4 					    VARCHAR2(1000)
 SPARE5 					    VARCHAR2(1000)
 SPARE6 					    DATE
Re: Password History [message #482245 is a reply to message #482242] Wed, 10 November 2010 10:07 Go to previous messageGo to next message
Michel Cadot
Messages: 58607
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
when: SYS.USER$.PTIME
who: without audit, Log Miner.

Regards
Michel

[Edit: Sorry BlackSwan, I didn't see your sentence before code block.]


[Updated on: Wed, 10 November 2010 10:08]

Report message to a moderator

Re: Password History [message #482248 is a reply to message #482245] Wed, 10 November 2010 10:15 Go to previous messageGo to next message
amateur
Messages: 2
Registered: November 2010
Location: HK
Junior Member
Thank you! We have a group of DBAs but nobody own up to tell me who change the SYS or SYSTEM password. I suppose I can ask me to list this for my review. Another question is: our user account admistrators have are granted with alteruser, will these administrators be able to change the SYS or SYSTEM password even though they are not granted with the full DBA rights?

Regards,
Re: Password History [message #482251 is a reply to message #482248] Wed, 10 November 2010 10:18 Go to previous message
Michel Cadot
Messages: 58607
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Correct! So do NOT grant this very high powerful privilege.

Regards
Michel
Previous Topic: User management
Next Topic: How to Enhance Security of Windows and Recover Lost/Forgotten Password
Goto Forum:
  


Current Time: Tue Jul 29 04:43:09 CDT 2014

Total time taken to generate the page: 0.08446 seconds