Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


oracle stale user accounts

Posted on 2014-02-14
Medium Priority
Last Modified: 2014-03-02
would there be any tell tale signs in a an oracle database about "stale accounts", i.e. those that could be locked and epxired? I am not sure i there is a last login type flag, or whether that is the most appropriate marker, as perhaps some accounts dont "login" like a normal user would?
Question by:pma111
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
LVL 28

Accepted Solution

Naveen Kumar earned 668 total points
ID: 39858589
i think only after you enable audit - audit sessions etc then you will have a history of who is connecting, when etc, whether the remaining can be locked and the other information.

Is the auditing enabled ?
LVL 38

Assisted Solution

by:Geert Gruwez
Geert Gruwez earned 668 total points
ID: 39858609
audit .. or a login trigger which stores the last login attempt in a separate table

Author Comment

ID: 39858657
but by default there is no last login stamp? is that correct
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 39858684
can you have accounts that are neccesary but may not "login" as such, can you provide examples of these kinds of account?
LVL 38

Expert Comment

by:Geert Gruwez
ID: 39858705
well... sys is very necessary
but usually only dba's login with that when they setup the database

system also

that's the main 2, the rest is optional
but that again depends on what you are using

here is a list of the oracle default users
LVL 23

Assisted Solution

by:Steve Wales
Steve Wales earned 664 total points
ID: 39859362
You can query DBA_USERS to find out any accounts that are actually set to expired and/or locked (a column called ACCOUNT_STATUS).

No way short of a login trigger that immediately comes to mind to track last login.

In 12c, they've added last_login to dba_users, but prior to that, you have to track it yourself.
LVL 28

Expert Comment

by:Naveen Kumar
ID: 39863734
also unless you do a deep dig into all the user account details in your database, it would not be easy to say which all accounts are required and which are not required.

To start with, probably you can extract the information from dba_users and then start the investigation from there.

As mentioned already, do not delete/drop any internal/system accounts which are required for the database.


Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this series, we will discuss common questions received as a database Solutions Engineer at Percona. In this role, we speak with a wide array of MySQL and MongoDB users responsible for both extremely large and complex environments to smaller singl…
Your data is at risk. Probably more today that at any other time in history. There are simply more people with more access to the Web with bad intentions.
This video shows how to copy an entire tablespace from one database to another database using Transportable Tablespace functionality.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question