| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Re: Failed login attempts
Hi Bunyamin,
All I can is that by following these exact steps I get it working!
SQL> select username,action_name,returncode from dba_audit_trail;
USERNAME ACTION_NAME RETURNCODELOGOFF_TI
------------------------------ --------------------------- ----------
SYSTEM LOGON 0 SCOTT LOGON 1017 JIM LOGON 101716 rows selected
In another window attempt to login a
Bunyamin/dba
SYSTEM LOGOFF 0 SCOTT LOGOFF 0 SYSTEM LOGOFF 0 SYSTEM LOGON 0 SCOTT LOGON 1017 JIM LOGON 1017 BUNYAMIN LOGON 101717 rows selected
As far as I can tell this is working. The retuncode of 1017 indicates unsuccessfull logins.
John
bunyamink_at_havelsan.com.tr wrote:
>I tried What you said . but still no rows returns from dba_audit_trail
>although failed login attempts occured.
>
>
>
>Bunyamin K. Karadeniz
>Oracle DBA / Developer
>Civilian IT Department
>Havelsan A.S. Eskisehir yolu
>7.km Ankara Turkey
>Phone: +90 312 2873565 / 1217
>Mobile : +90 535 3357729
>
>The degree of normality in a database
>is inversely proportional to that of its DBA.
>
>----- Original Message -----
>To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
>Sent: Thursday, March 21, 2002 3:48 PM
>
>
>>1. change the initializaion parameter audit_trail to be:
>>
>>audit_trail=db
>>shutdown and restart database
>>
>>2. connect to the database as a user that has the privilege "AUDIT
>>SYSTEM" and enter
>>
>>audit session whenever not successful
>>
>>at this point you can see these unsuccessful logins by monitoring the
>>dba_audit_trail view.
>>
>>John
>>
>>waibals_at_mtn.co.ug wrote:
>>
>>>Hi all,
>>>Which is the best way to keep audit of failed login attempts to the
>>>
>oracle
>
>>>server -without turning on full audit?
>>>Thanking you,
>>>---
>>>+---------------------------------------------------+
>>>C.S Waibale Simon
>>>MTN-Uganda,
>>>Cell: +256 77-212655,http://mtn.co.ug
>>>+---------------------------------------------------+
>>>
>>
>>--
>>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>>--
>>Author: Ora NT DBA
>> INET: orantdba_at_netscape.net
>>
>>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>>San Diego, California -- Public Internet access / Mailing Lists
>>--------------------------------------------------------------------
>>To REMOVE yourself from this mailing list, send an E-Mail message
>>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>>the message BODY, include a line containing: UNSUB ORACLE-L
>>(or the name of mailing list you want to be removed from). You may
>>also send the HELP command for other information (like subscribing).
>>
>
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Ora NT DBA INET: orantdba_at_netscape.net Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Fri Mar 22 2002 - 06:53:25 CST
 |
 |