A description of the meaning of various values of the ACCOUNT_STATUS column in the DBA_USERS view

SQL > select * from sys.user_astatus_map STATUS# STATUS--0 OPEN 1 EXPIRED 2 EXPIRED (GRACE) 4 LOCKED (TIMED) 8 LOCKED 5 EXPIRED & LOCKED (TIMED) 6 EXPIRED (GRACE) & LOCKED (TIMED) 9 EXPIRED & LOCKED 10 EXPIRED (GRACE) & LOCKED9 rows selected

From the query above, we can see that accunt has a total of nine different states in Oracle, corresponding to the account_status field in the dba_users view. Below I will make a simple explanation on the meaning and occurrence of each state in order to facilitate system management and maintenance in the future.

By analyzing the above nine states, it is not difficult to see that there are only five independent states: OPEN, EXPIRED, LOCKED, EXPIRED (GRACE) and LOCKED (TIMED). The other four are just a combination of the first few forms.

OPEN: this is the most common one, which means that this account is available without any restrictions.

LOCKED: indicates that this account is locked by DBA. Generally through alter user username account lock (unlock)

EXPIRED: indicates that the account is set to password expiration and requires the user to change the password the next time logon (the system will prompt you to change the password for the first login after the account is set to expire)

EXPIRED (GRACE): when grace is set (after the first successful login to how many days after the password expires), the account is reminded to change the password and can log in normally, and the account_status is displayed as EXPIRED (GRACE).

LOCKED (TIMED): this state indicates that the number of failed login exceeds FAILED_LOGIN_ATTEMPTS and is automatically locked by the system. It should be noted that in Oracle 10g, the default default value is 10 times.

The remaining situations are the combination of the above:

EXPIRED & LOCKED

SQL > alter user study password expire account lock

The user has changed.

SQL > select account_status from dba_users where username='STUDY'

ACCOUNT_STATUS

-

EXPIRED & LOCKED

SQL >

EXPIRED (GRACE) & LOCKED (TIMED) when account_stutus is EXPIRED (GRACE), the user fails login more times than FAILED_LOGIN_ATTEMPTS and is automatically locked by the system

EXPIRED & LOCKED (TIMED) when account expire is set, the user fails login more times than FAILED_LOGIN_ATTEMPTS and is automatically locked by the system

EXPIRED (GRACE) & the status of a LOCKED user whose account_status is EXPIRED (GRACE) and whose account is manually locked by DBA.