Shulou(Shulou.com)05/31 Report--

This article is about how to implement PROFILE in the database. The editor thinks it is very practical, so share it with you as a reference and follow the editor to have a look.

First, create

CREATE PROFILE LIMIT

FAILED_LOGIN_ATTEMPTS 6

PASSWORD_LIFE_TIME 60

PASSWORD_REUSE_TIME 60

PASSWORD_REUSE_MAX 5

PASSWORD_VERIFY_FUNCTION verify_function

PASSWORD_LOCK_TIME 1/24

PASSWORD_GRACE_TIME 90

Level restrictions for password resources (default: UNLIMITED)

1. FAILED_LOGIN_ATTEMPTS: generally set 5 to 6 times

Set the maximum number of attempts to log in before the account is locked.

2 、 PASSWORD_LIFE_TIME:

Specifies the number of days allowed for the same password. If the password_grace_time parameter is also specified, if the password is not changed within the grace period, the password will expire and the connection to the database will be denied. If the password_grace_time parameter is not set, the default value of unlimited raises a database warning, but allows the user to continue to connect.

3. PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX:

These two parameters must be related to each other. Password_reuse_time specifies the number of days before the password cannot be reused, while password_reuse_max specifies the number of times the password changes before the current password is reused. Both parameters must be set to integers.

Note:

i. If integers are specified for these two parameters, the user cannot reuse the password until the password has been changed the number of times specified by password_reuse_max within the time specified by password_reuse_time. For example: password_reuse_time=30,password_reuse_max=10, users can reuse the password after 30 days, requiring that the password must be changed more than 10 times.

ii. If one of them is specified as an integer and the other is unlimited, the user can never reuse a password.

iii. If you specify one of the default values defined in profile for the default,Oracle database, all parameters are set to unlimited by default in profile, and if the default value of profile is not changed, the database always defaults to unlimited for that value.

vi. If both parameters are set to unlimited, the database ignores them.

4 、 PASSWORD_LOCK_TIME:

Specifies the lockout time (in days) of the account after the number of failed login attempts.

5 、 PASSWORD_GRACE_TIME:

Specify the number of days of grace, the number of days before the database issues a warning before the login expires. If the database password is not changed in between, the expiration will expire.

6 、 PASSWORD_VERIFY_FUNCTION:

This field allows complex PL/SQL password validation scripts to be passed as parameters to create profile statements. The Oracle database provides a default script, but you can create your own validation rules or use third-party software to validate. For the Function name, specify the name of the password authentication rule, and specifying Null means that the password authentication feature is not used. If you specify an expression for a password parameter, the expression can be in any format except the database scalar quantum query.

Resource limits at the session level (default: UNLIMITED)

1 、 SESSIONS_PER_USER:

Specifies to limit the number of concurrent sessions for users

2. CPU_PER_SESSION: defines the time of CPU occupied by each SESSION. (unit: 1 beat 100 seconds)

3 、 IDLE_TIME:

Specifies the total time (in minutes) that the session is allowed to be continuously inactive. After that time, the session will be disconnected. However, running queries and other operations for a long time is not subject to this restriction.

4 、 CONNECT_TIME:

Specifies the total connection time for the session. (in minutes)

5 、 LOGICAL_READS_PER_SESSION:

Specifies the number of blocks allowed to be read in a session, including all blocks read from memory and disk.

6 、 PRIVATE_SGA:

Specifies the maximum amount of space (in bytes) that a session is allowed to allocate in the shared pool (SGA).

Note: this restriction is valid only when using a shared server architecture. Private space for sessions in SGA includes private SQL and PL/SQL, but does not include shared SQL and PL/SQL.

7 、 COMPOSITE_LIMIT:

Specifies the total resource consumption for a session, expressed in service units units. The Oracle database calculates the total service units of cpu_per_session,connect_time,logical_reads_per_session and private-sga in a favorable way

Resource limits at the call level (default: UNLIMITED)

1 、 CPU_PER_CALL:

Specifies the CPU time limit for one call (parse, execute, and extract). (unit: 1 beat 100 seconds)

2 、 LOGICAL_READS_PER_CALL:

Specifies the maximum number of data blocks allowed to be read in a single SQL (parse, execute, and extract) call.

Second, modify the profile attribute

ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED

III. Enable restrictions

ALTER SYSTEM SET RESOURCE_LIMIT=TRUE SCOPE=BOTH

4. Modify the user's default profile

ALTER USER user_name PROFILE profile_name

Thank you for reading! This is the end of the article on "how to achieve PROFILE in the database". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, you can share it out for more people to see!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.