Re: oracle account suddenly change to lock???

From: steve montgomerie <stmontgo_at_gmail.com>
Date: Sun, 22 Nov 2009 20:17:44 -0500
Message-ID: <5d4504220911221717i77f6c17bk616af3b6c71b83c0_at_mail.gmail.com>



This may help

Finding the source of failed login attempts. [ID 352389.1]

Came in handy for me where a rogue app server would sit and spin with failed logins.

Best Regards,

Steve

On Sat, Nov 21, 2009 at 1:22 PM, Gints Plivna <gints.plivna_at_gmail.com> wrote:
> 2009/11/21 Mark W. Farnham <mwf_at_rsiz.com>:
>> do you lock accounts after a certain number of connection attempts that are
>> bad?
>>
>> If so, this can be a symptom of a variety of denial of service attack
>
> Sometimes it is just simple db user password change without
> configuring all webservers/whatever else app servers with new
> password. So they are trying to connect using old password and locking
> account again and again :)
>
> Of course  assuming failed_login_attempts has been set in profiles.
>
> Gints Plivna
> http://www.gplivna.eu
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>

--
http://www.freelists.org/webpage/oracle-l
Received on Sun Nov 22 2009 - 19:17:44 CST

Original text of this message