You need to set up a profile in your database in order to establish limitations such as :
- number of failed login attempts before the account is locked
- number of days before a password can be reused
etc.
And then, you have to set the profile to your users.
In your request, you ask for password expiration. You need to use PASSWORD_LIFE_TIME which "limits the number of days the same password can be used for authentication".
CREATE PROFILE pass_expiration
LIMIT
PASSWORD_LIFE_TIME 90; %(for 3 months) but also 180 (6 months), 365 (yearly), 450 (18 months)
ALTER USER my_user PROFILE pass_expiration;
Hope that helps
Main Topics
Browse All Topics





by: dvzPosted on 2009-04-08 at 05:59:54ID: 24096678
ALTER PROFILE lets you modify a particular parameter. The sample syntax is ALTER PROFILE xxx LIMIT PASSWORD_LIFETIME 180;
where xxx is the profile associated with the account(s) in question.