11g密码过期问题
11g密码过期问题
开发反映，应用帐号即将过期，提示修改密码，登录数据库查看用户状态为LOCKED(TIMED)

sys@TYOLAP1(dtydb3)>select * from dba_profiles order by 1;

PROFILE RESOURCE_NAME RESOURCE LIMIT
------------------------------ -------------------------------- -------- ----------------------------------------
APP_PROFILE PASSWORD_GRACE_TIME PASSWORD DEFAULT
APP_PROFILE PASSWORD_LIFE_TIME PASSWORD DEFAULT
APP_PROFILE FAILED_LOGIN_ATTEMPTS PASSWORD DEFAULT
APP_PROFILE PRIVATE_SGA KERNEL DEFAULT
APP_PROFILE CPU_PER_SESSION KERNEL DEFAULT
APP_PROFILE CONNECT_TIME KERNEL DEFAULT
APP_PROFILE IDLE_TIME KERNEL DEFAULT
APP_PROFILE COMPOSITE_LIMIT KERNEL DEFAULT
APP_PROFILE LOGICAL_READS_PER_CALL KERNEL DEFAULT
APP_PROFILE PASSWORD_REUSE_TIME PASSWORD UNLIMITED
APP_PROFILE PASSWORD_REUSE_MAX PASSWORD UNLIMITED

PROFILE RESOURCE_NAME RESOURCE LIMIT
------------------------------ -------------------------------- -------- ----------------------------------------
APP_PROFILE PASSWORD_VERIFY_FUNCTION PASSWORD VERIFY_FUNCTION_11G
APP_PROFILE LOGICAL_READS_PER_SESSION KERNEL DEFAULT
APP_PROFILE PASSWORD_LOCK_TIME PASSWORD DEFAULT
APP_PROFILE SESSIONS_PER_USER KERNEL DEFAULT
APP_PROFILE CPU_PER_CALL KERNEL DEFAULT

控制密码过期的策略PASSWORD_LIFE_TIME为DEFAULT，应该没设过期限制，但帐号确实是过期了，
查阅官方材料，11g中确实有了改变，默认参数的值变了，具体如下


因此，为了安全起见，修改密码相关的资源限制为unlimit，密码永不过期，过期后锁定1分钟左右（0.0006天）
ALTER PROFILE APP_PROFILE limit PASSWORD_LIFE_TIME UNLIMITED;

ALTER PROFILE APP_PROFILE limit PASSWORD_LOCK_TIME 0.0006

able 2-1 Default Security Settings for Initialization and Profile ParametersSetting1011

AUDIT_TRAIL

NONE

DB

O7_DICTIONARY_ACCESSIBILITY

FALSE

FALSE

PASSWORD_GRACE_TIME

UNLIMITED

7

PASSWORD_LOCK_TIME

UNLIMITED

1

FAILED_LOGIN_ATTEMPTS

10

10

PASSWORD_LIFE_TIME

UNLIMITED

180

PASSWORD_REUSE_MAX

UNLIMITED

UNLIMITED

PASSWORD_REUSE_TIME

UNLIMITED

UNLIMITED

REMOTE_OS_ROLES

FALSE

FALSE

http://docs.oracle.com/cd/E11882_01/server.112/e10575/tdpsg_install_config.htm#TDPSG60066