Shulou(Shulou.com)06/01 Report--

Today, let's talk about the password rules and strategies of Oracle database:

-change the password

Alter user FINCHINA account unlock identified by finRTg6

-query whether the user is locked and the time

SELECT USERNAME,ACCOUNT_STATUS,LOCK_DATE,CREATED,PROFILE FROM DBA_USERS WHERE USERNAME='USER'

-query the user's default profile

Select profile from dba_users where username='PATROL'

-query user password policy

Set linesize 333

Col profile for a20

Col resource_name for a25

Col resource for a15

Col limit for a20

Select * from dba_profiles where profile='DEFAULT'

And resource_type='PASSWORD'

-modify resource limit status

-the restrictions on resources in all PROFILE owned by users are related to the setting of the resource_limit parameter, which takes effect when it is TRUE and has no effect when it is FALSE (default).

-this initialization parameter can be modified dynamically.

-enable resource_limit=true

Show parameter resource_limit

Alter system set resource_limit=true

-unlimited modification

Alter profile default limit PASSWORD_LIFE_TIME unlimited

Alter profile default limit FAILED_LOGIN_ATTEMPTS unlimited

Alter profile default limit PASSWORD_LOCK_TIME unlimited

Alter profile default limit PASSWORD_GRACE_TIME unlimited

-modify the user default profile

Alter user PATROL profile default

-close resource_limit=FALSE

Alter system set resource_limit=FALSE

Show parameter resource_limit

-Field meaning:

-number of password errors (the account will be locked after the number of errors is exceeded)

DEFAULT FAILED_LOGIN_ATTEMPTS PASSWORD 3

-password validity period (days)

DEFAULT PASSWORD_LIFE_TIME PASSWORD 180

-the number of days that the password cannot be reused

DEFAULT PASSWORD_REUSE_TIME PASSWORD UNLIMITED

-the minimum number of changes before password reuse

DEFAULT PASSWORD_REUSE_MAX PASSWORD UNLIMITED

-password complexity

DEFAULT PASSWORD_VERIFY_FUNCTION PASSWORD NULL

-after more than 1 day, the account is automatically unlocked

DEFAULT PASSWORD_LOCK_TIME PASSWORD 1

-the password will be provided 7 days in advance when it expires.

DEFAULT PASSWORD_GRACE_TIME PASSWORD 7

-(example) modify the policy (lock after 3 illegal logins within 60s, and log in again in 30 minutes):

Alter profile default limit PASSWORD_LIFE_TIME 180

Alter profile default limit FAILED_LOGIN_ATTEMPTS 3

Alter profile default limit PASSWORD_LOCK_TIME 3/144

Alter profile default limit PASSWORD_GRACE_TIME 7

For more information:

How to modify the expiration policy of oracle database password

The method of strengthening password Policy in Oracle Database

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.