Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: password aging and expiration in oracle 8.1.7

Re: password aging and expiration in oracle 8.1.7

From: <Reginald.W.Bailey_at_jpmorgan.com>
Date: Tue, 27 Aug 2002 15:48:21 -0800
Message-ID: <F001.004C0EC3.20020827154821@fatcity.com>

If you are logging in via SQL Plus, ensure that "set serveroutput on" is set in your local glogin.sql file. If you are logging in via an application using JDBC or OCI, then the call must be made to with the ChangePassword Parameter. See the OCI and JDBC documentation for this information. Also, ensure that RESOURCE_LIMIT = TRUE in the init.ora file. I have implemented password aging and expiration and it works fine, just as intended. Which sometimes irks off the users.

RWB "Mandal, Ashoke" <ashoke.k.mandal_at_medtronic.com>@fatcity.com on 08/27/2002 06:10:00 PM

Please respond to ORACLE-L_at_fatcity.com

Sent by: root_at_fatcity.com

To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> cc:

Hi All,

I am trying to implement the password aging and expiration. The password for some of the users have expired on August 23, 2002. When I try to login it does not give any warning. Only thing I observed that the account_status was changed from OPEN to EXPIRED(GRACE) during my first attempt to login.

Could any of you explain me, why the warning message is not appearing when I attempt to login during the grace period. Am I missing something. Following email from Richard explains how should it work.

Thanks,
Ashoke

 -----Original Message-----
Sent: Monday, July 22, 2002 3:59 PM
To: Multiple recipients of list ORACLE-L

>From the 8i docs:

Password Aging and Expiration

DBAs use the CREATE PROFILE statement to specify a maximum lifetime for passwords. When the specified amount of time passes and the password expires, the user or DBA must change the password. The following statement indicates that ASHWINI can use the same password for 90 days before it expires:

CREATE PROFILE prof LIMIT

    FAILED_LOGIN_ATTEMPTS 4
    PASSWORD_LOCK_TIME 30
   PASSWORD_LIFE_TIME  90;

ALTER USER ashwini PROFILE prof;

DBAs can also specify a grace period using the CREATE PROFILE statement. Users enter the grace period upon the first attempt to login to a database account after their password has expired. During the grace period, a warning message appears each time users try to log in to their accounts, and continues to appear until the grace period expires. Users must change the password within the grace period. If the password is not changed within the grace period, the account expires and no further logins to that account are allowed until the password is changed. Figure 22-2 shows the chronology of the password lifetime and grace period.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Reginald.W.Bailey_at_jpmorgan.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Tue Aug 27 2002 - 18:48:21 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US