Re: monitor failed login attempts

StefanKapitza je napisal:
> jeffchirco_at_gmail.com wrote:
> > Is there a way to find out what OS user had a failed login attempt to
> > Oracle because of wrong password? Or any way to tell somebody tried to
> > login but was unsucessful?
> > Thanks.
> >
> > Jeff
>
> check the audit option ("audit session whenever not successful")
>
> OsUser is stored in sys.aud$ (IIRC column spare1)
>
> regards
>
> stefan Kapitza

Hi,

Here are the steps needed to provied auditing:

1.Add audit_trail=db parameter in your initSID.ora
2.in sqlplus as sys put=>audit session whenever not successful;
3.sqlplus scott/cat_at_yourdb (cat is wrong password)
4.select * from sys.aud$ order by timestamp# desc

Best regards,
Primoz Received on Tue Oct 25 2005 - 07:54:03 CDT