setting up oracle user account to expire in xx months

Posted on 2009-04-08
Medium Priority
Last Modified: 2012-05-06
I have oracle user account that need to be set such as that their password expire after 6months, 12months and 18months
win 03
version 9.2

Question by:taaz
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
LVL 23

Expert Comment

ID: 24096678
ALTER PROFILE lets you modify a particular parameter.  The sample syntax is ALTER PROFILE xxx LIMIT PASSWORD_LIFETIME 180;
where xxx is the profile associated with the account(s) in question.

Assisted Solution

chuchyyy earned 1000 total points
ID: 24096776
You need to set up a profile in your database in order to establish limitations such as :
- number of failed login attempts before the account is locked
- number of days before a password can be reused
And then, you have to set the profile to your users.

In your request, you ask for password expiration. You need to use PASSWORD_LIFE_TIME which "limits the number of days the same password can be used for authentication".

CREATE PROFILE pass_expiration
PASSWORD_LIFE_TIME 90; %(for 3 months) but also 180 (6 months), 365 (yearly), 450 (18 months)

ALTER USER my_user PROFILE pass_expiration;

Hope that helps

Expert Comment

ID: 24096784
oups... Already answered, sorry. I began to write before you answered ;-)
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.


Author Comment

ID: 24110954
If I assign a profile "pass_exp" to a user would it change his privileges that the user was having or it would remain the same except the one in the profile "pass_exp"?  
LVL 23

Assisted Solution

David earned 1000 total points
ID: 24111163
Let's clarify how you're using "privileges" -- a user account has to be assigned to a profile when the account is created - usually "DEFAULT".  The account may be assigned to one and only one profile at a time -- so to your question, altering a user to a different profile means the whole set of profile parameters is changed.  Remember, this has nothing to do with object or role-based privileges.
A profile has nine RESOURCE attributes, and seven PASSWORD ones.  When a profile is altered, for example changing FAILED LOGIN ATTEMPTS from 10 to 3, all users who use that profile will use the changed values upon one's next login.
Does that help?

Author Comment

ID: 24114749
basicall  I like to extend the user password expiration time without hurting all privileges the user is having  such that

userA1,userA2,userA3 passowrd expire after 180 days

user B1,userb2.userB3 password expire after 365days

userC1,userC2,userc3   password expire after 90 days

I just want to extend the password but want other privileges to remain the same.

Expert Comment

ID: 24114783
dvz, tell me if i'm wrong but he can create a single profile with the limited password and others privileges stuff. Is that right ?

Accepted Solution

taaz earned 0 total points
ID: 24115395
Username:    Useradmin
Profile      :    Password
Expiry_date      :04-13-09 (from    dba_users)

In the profile  Password
Password Lifetime(Days):      365

How to extend useradmin's password  for another 365 days (04-13-2010)


Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background In several of the companies I have worked for, I noticed that corporate reporting is off loaded from the production database and done mainly on a clone database which needs to be kept up to date daily by various means, be it a logical…
From implementing a password expiration date, to datatype conversions and file export options, these are some useful settings I've found in Jasper Server.
This video shows, step by step, how to configure Oracle Heterogeneous Services via the Generic Gateway Agent in order to make a connection from an Oracle session and access a remote SQL Server database table.
This video shows how to copy a database user from one database to another user DBMS_METADATA.  It also shows how to copy a user's permissions and discusses password hash differences between Oracle 10g and 11g.
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question