Re: account locking up
From: Hans Forbrich <fuzzy.graybeard_at_gmail.com>
Date: Thu, 11 Apr 2013 08:11:04 -0600
Message-ID: <5166C478.9070008_at_gmail.com>
On 10/04/2013 10:53 PM, C P wrote:
> After the upgrade one of the accounts necessary for connecting to the DB keeps
> locking up, because some application is trying to log in with wrong
> password.
Can you confirm this attempted access is indeed legitimate? Or might it be rogue (eg: someone trying to transfer info to Excel) or hack (unwanted, potentially illegal, access)?
Date: Thu, 11 Apr 2013 08:11:04 -0600
Message-ID: <5166C478.9070008_at_gmail.com>
On 10/04/2013 10:53 PM, C P wrote:
> After the upgrade one of the accounts necessary for connecting to the DB keeps
> locking up, because some application is trying to log in with wrong
> password.
Can you confirm this attempted access is indeed legitimate? Or might it be rogue (eg: someone trying to transfer info to Excel) or hack (unwanted, potentially illegal, access)?
Aside from the denial due to lock-out, are there any application aspects that are not able to work?
As other have suggested, AUD is the way to go - see chapter 9 of the
Security guide at
http://docs.oracle.com/cd/E11882_01/network.112/e16543/toc.htm
<soapbox>
If you have any influence or input to the application, try to encourage
them to set session data that can be used *after login* to discriminate
sessions, using DBMS_APPLICATION_INFO.
</soapbox>
/Hans
-- http://www.freelists.org/webpage/oracle-lReceived on Thu Apr 11 2013 - 16:11:04 CEST