Solved

setting up oracle user account to expire in xx months

Posted on 2009-04-08
8
1,877 Views
Last Modified: 2012-05-06
I have oracle user account that need to be set such as that their password expire after 6months, 12months and 18months
win 03
version 9.2

thanks
0
Comment
Question by:taaz
  • 3
  • 3
  • 2
8 Comments
 
LVL 23

Expert Comment

by:David
Comment Utility
ALTER PROFILE lets you modify a particular parameter.  The sample syntax is ALTER PROFILE xxx LIMIT PASSWORD_LIFETIME 180;
where xxx is the profile associated with the account(s) in question.
0
 
LVL 2

Assisted Solution

by:chuchyyy
chuchyyy earned 250 total points
Comment Utility
You need to set up a profile in your database in order to establish limitations such as :
- number of failed login attempts before the account is locked
- number of days before a password can be reused
etc.
And then, you have to set the profile to your users.

In your request, you ask for password expiration. You need to use PASSWORD_LIFE_TIME which "limits the number of days the same password can be used for authentication".

CREATE PROFILE pass_expiration
LIMIT
PASSWORD_LIFE_TIME 90; %(for 3 months) but also 180 (6 months), 365 (yearly), 450 (18 months)

ALTER USER my_user PROFILE pass_expiration;

Hope that helps
0
 
LVL 2

Expert Comment

by:chuchyyy
Comment Utility
oups... Already answered, sorry. I began to write before you answered ;-)
0
 

Author Comment

by:taaz
Comment Utility
If I assign a profile "pass_exp" to a user would it change his privileges that the user was having or it would remain the same except the one in the profile "pass_exp"?  
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 23

Assisted Solution

by:David
David earned 250 total points
Comment Utility
Let's clarify how you're using "privileges" -- a user account has to be assigned to a profile when the account is created - usually "DEFAULT".  The account may be assigned to one and only one profile at a time -- so to your question, altering a user to a different profile means the whole set of profile parameters is changed.  Remember, this has nothing to do with object or role-based privileges.
A profile has nine RESOURCE attributes, and seven PASSWORD ones.  When a profile is altered, for example changing FAILED LOGIN ATTEMPTS from 10 to 3, all users who use that profile will use the changed values upon one's next login.
Does that help?
0
 

Author Comment

by:taaz
Comment Utility
basicall  I like to extend the user password expiration time without hurting all privileges the user is having  such that

userA1,userA2,userA3 passowrd expire after 180 days

user B1,userb2.userB3 password expire after 365days

userC1,userC2,userc3   password expire after 90 days

I just want to extend the password but want other privileges to remain the same.
0
 
LVL 2

Expert Comment

by:chuchyyy
Comment Utility
dvz, tell me if i'm wrong but he can create a single profile with the limited password and others privileges stuff. Is that right ?
0
 

Accepted Solution

by:
taaz earned 0 total points
Comment Utility
Username:    Useradmin
Profile      :    Password
Expiry_date      :04-13-09 (from    dba_users)


In the profile  Password
Password Lifetime(Days):      365

How to extend useradmin's password  for another 365 days (04-13-2010)

0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

Suggested Solutions

Working with Network Access Control Lists in Oracle 11g (part 2) Part 1: http://www.e-e.com/A_8429.html Previously, I introduced the basics of network ACL's including how to create, delete and modify entries to allow and deny access.  For many…
This post first appeared at Oracleinaction  (http://oracleinaction.com/undo-and-redo-in-oracle/)by Anju Garg (Myself). I  will demonstrate that undo for DML’s is stored both in undo tablespace and online redo logs. Then, we will analyze the reaso…
This video shows how to copy a database user from one database to another user DBMS_METADATA.  It also shows how to copy a user's permissions and discusses password hash differences between Oracle 10g and 11g.
Via a live example, show how to take different types of Oracle backups using RMAN.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now