Oracle user password management

Use profile for password restriction. When you set up a database, oracle automatically creates a profile file called default, and when the creation does not specify the profile option, oracle assigns default to the user.

(1) account locking: the number of times the password is entered and the locking time. Typically, only dba executes this command.

Create a profile file. [lock_account]

Create profile lock_account limit failed_login_attempts 3 password_lock_time 2; [the file name created by lock_accout can be arbitrary]

Conn system/manager

Create profile aaa1 limit faild_login_attempts 3 password_lock_time 2

Alter user xiaohomg profile aaa1

Now experiment with xiaohong users:

Error report: the account is locked

(2) user unlock:

Conn system/manager

Alter user xiaohong account unlock

In-use xiaohong user trials:

(3) terminate the user's password: force the user to change the password.

Create a profile file. [password_time_limit]

Conn system/manager

Create profile aaa2 limit password_life_time 10 password_grace_time 2

Alter user xiaohong profile aaa2

(4) the password history cannot be repeated, that is, when the user is forced to change the password, the password modified again cannot be the same as the original. [password_history]

Create a profile file.

Conn system/manager

Create profile aaa3 limit password_life_time 10 password_grace_time 2 password_resuse_time 10

(5) Delete profile file

Drop profile aaa3; then authorized users no longer have this restriction.