Oracle - locked user. URGENT

Hello

I just changed the password for one of the user on my database.
In the meantime many requests hit database with this user with the old password and the account is now locked.
I UNBLOCKED the user with command below: -.

ALTER USER omuser identified by omusernew ACCOUNT UNLOCK;

but I am still unable to connect to this schema (omuser)

Can someone please help me solve this?

Here are the details of DEFAULT profile: -.

Select resource_type, resource_name, limit
of dba_profiles
where profile = 'Default';

RESOURCE_NAME RESOURCE_TYPE LIMIT

COMPOSITE_LIMIT KERNEL UNLIMITED
SESSIONS_PER_USER KERNEL UNLIMITED
CPU_PER_SESSION KERNEL UNLIMITED
CPU_PER_CALL KERNEL UNLIMITED
LOGICAL_READS_PER_SESSION KERNEL UNLIMITED
LOGICAL_READS_PER_CALL KERNEL UNLIMITED
KERNEL IDLE UNLIMITED
CONNECT_TIME UNLIMITED CORE
PRIVATE_SGA KERNEL UNLIMITED
PASSWORD FAILED_LOGIN_ATTEMPTS 10
PASSWORD_LIFE_TIME UNLIMITED PASSWORD
PASSWORD PASSWORD_REUSE_TIME UNLIMITED
PASSWORD PASSWORD_REUSE_MAX UNLIMITED
PASSWORD_VERIFY_FUNCTION NULL PASSWORD
PASSWORD_LOCK_TIME UNLIMITED PASSWORD
PASSWORD_GRACE_TIME UNLIMITED PASSWORD
I cannot restart this DB.
One thing that I have noticed is that LOCK_DATE in DBA_USERS changes
everytime I fire ALTER USER OMUSER IDENTIFIED BY OMUSERNEW ACCOUNT UNLOCK.

You probably have a wandering script somewhere; a temporal work around would be to create a different profile and you tie in the new user of the application profile.

CREATE PROFILE APPUSR_DEFAULT LIMIT
COMPOSITE_LIMIT UNLIMITED
SESSIONS_PER_USER UNLIMITED
CPU_PER_SESSION UNLIMITED
CPU_PER_CALL UNLIMITED
LOGICAL_READS_PER_SESSION UNLIMITED
LOGICAL_READS_PER_CALL UNLIMITED
IDLE_TIME UNLIMITED
CONNECT_TIME UNLIMITED
PRIVATE_SGA UNLIMITED
FAILED_LOGIN_ATTEMPTS UNLIMITED
PASSWORD_LIFE_TIME UNLIMITED
PASSWORD_REUSE_TIME UNLIMITED
PASSWORD_REUSE_MAX UNLIMITED
PASSWORD_VERIFY_FUNCTION NULL
PASSWORD_LOCK_TIME UNLIMITED
PASSWORD_GRACE_TIME UNLIMITED;

ALTER USER omuser PROFILE appusr_default;

ALTER USER omuser ACCOUNT UNLOCK;

Take note of the "UNLIMITED FAILED_LOGIN_ATTEMPTS"

Kind regards
Phiri

Published by: phiri on March 19, 2010 05:22

Tags: Database

Similar Questions

  • Windows SteadyState and MSE for locked user? Locked user _save files on the desktop? Add the locked user language

    I use Microsoft Windows XP SP3 and Microsoft Security Essentials.

    I did 2 locked users:

    1 locked with custom Restrictions user running Internet Explorer and other Internet browsers, write and draw and nothing much and is welcomed by right clicking on the program icon only run under other Creditentials.

    2 power User, made from MMC with Chater way to have more power that any user who can not only surf the Internet, but also play games online, and this user is also locked.

    My question is: how to make 1. User has locked protected with Microsoft Security Essentials, cause seems MSE is not protect this account, and I can't be sure because of the locked account cannot see even if it is protected, I put MSE on startup but that does not put MSE icon on the taskbar. If it is not protected is not a good cause for the idea that the user navigates Net.

    Another thing I want to do:

    For both locked users able to save files to the desktop and I have it unchecked in Windows SteadyState, but when I connect them and when I log into files are not saved on their desktop computers. So what is the point of selection/deslecting in sign of Restriction if the files went once they logout?

    I wanted to do administrator can retrieve files from their office soon logs in.

    Is - it possible and keep them locked?

    One last thing - since English isn't the only language to be used on 1 locked user account

    How can I put language so that the user can switch between EN and another language

    Thank you for your replies,

    Hi Jade000,

    I recommend you ask your question in the forums of SteadyState for assistance.

    Hope the helps of information.
    Concerning
    Joel S
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Why ORACLE HOME USER 12.1.0.2 LIMITED to SINGLE INSTANCE?

    Thank you for taking my question!


    I installed my first database 11g to 12.1.0.2 under windows (no cars).  I need help understanding new ORACLE HOME of the USER to affect my c 12 databases.


    The documentation below States "when YES creates the account of USER ORACLE HOME it can only be used by a database unique instance".  I don't understand why I can't add another instance and use the same YES program created the USER account to the HOME of ORACLE page?  Why choice is (1) differs from the number of choices (2) given that both can be local accounts?   In addition, if you are unable to sign the USER ORACLE HOME, how that affects the OEM or OEM agent running on the database target?

    Thank you!

    Kathie

    When installing YES offers three options to associate a user Oracle Home of the Oracle home:

    1. leave YES create a new user account to do as a user in the Oracle home page.
    This option of the newly created user has the rights to connect to the server.
    This can only be used for Single Instance databases.


    2. Select an existing local or a domain as account being the user Oracle Home.
    If the existing account has login privileges, then Oracle Home user will have login rights to the server.
    This must be a nonadministrator user.


    3. Select a built-in account as the user Oracle Home.
    In this local Service option / built-in account Local system will become user Oracle Home.

    So if you do not use CARS, so it's no problem. The documentation seems to say that Option 1 cannot be used with CARS, not Option 1 cannot be used with multiple instances.

  • Migration oracle db user of an operating system to any other user of system operating in an environment of rhel 6 with oracle 11.2.0.3.0

    Hi all

    Migration of oracle db user of an operating system to any other user of system operating in an environment of rhel 6 with oracle 11.2.0.3.0.

    Suppose I have a database running with os user user1

    I have another user user2 where I want the database runs and not on User1

    Please let me know how to achieve this goal,

    Thank you.

    Have you looked on the MOS for this?

    I thought to do exactly this, but ultimately I didn't actually accomplish. Despite the fact, it may be an interesting feature...

    Something like this:

    S ' ensure that two users are members of the same groups

    -Database stop

    -As the former owner, change the ownership of all files in Oracle Home, inventory of the Oracle and all data files, to the new. On Linux/Unix, only the owner (and root) can change the ownership of files, so all files/directories not belonging is not to the former user, will obtain authorization refuses, legitimately so. The new user for example cannot 'take' the files, because they are not his. Only the old can 'give' files. Of course, root can do as well, if you have this permission.

    -Configure the new user to set up the environment correctly (ORACLE_HOME,..)

    -Start of the database

    -Do NOT remove the old user of the system, but do not give him a different password

    That's what I think

  • Although I am Oracle Pro user forums

    If I am Oracle Pro user in the forums, I received an email of congratulations and certificate yesterday to become Journeyer like, it should be Pro user certificate. How to get an answer key? any idea?

    Hi Ngsankar,

    Thanks for the post.  We looked at in this and found that some of the letters that we sent were to the previous level people were reached and not their new level.  This is a manual process and we entered the wrong level.  We are fixing these and will send new with a correct level.

    Please continue to participate in our community.

    Kevin

  • configure error message for locking user even with correct password entry.

    Is there a way to view pages of credentials not valid error when a locked user enters a bad password? But if the same locked user enters a correct password, I want to show locked user error page. As a general rule, assume that a user is in the locked state. But if the user enters a wrong password or correct, I want to display different error pages. Is it possible to configure in OAM?

    There is no way of Quinte-traction before you get there. Account lockout = locking of account regardless of the truth of the password. Thus, as a sort of roundabout, what can be done is: in the URL of account lockout, give a page jsp or a servlet; in this jsp / servlet, read the username and password (the password will come in this jsp?) and make calls to asdk you can know if the password is correct or not.

    Another approach: have nothing in the account lockout url, but have an authentication failure URL. In this url, call a servlet, and then create asdk calls to see if he came here because of the locked a/c, or bad password. Pass the username in a cookie. in this approach, you can do without the user entered password; ASDK call to see if the user is locked.

    I hope this helps.

  • How can I you people lock users out of planning when you run jobs ODI?

    Is there a way to lock planning users, by running a file of DOS commands? Currently, I have to go manually in the Admin menu planning-> Application-> settings allow one owner to connect.
    I could write the script for updating a flag in the database repository indicator, BUT it would also require planning web app restart to follow.
    How can I you people lock users out of planning when you run jobs ODI to load data in Planning/Essbase app?

    I usually try and plan everything built out of opening hours. I agree it would be nice if there is a utility to change the status of the planning application.

    See you soon

    John
    http://John-Goodwin.blogspot.com/

  • locked user is still able to connect

    Hello world!

    I create users for my application manually inside the application. I have a lock_user process, that is executed when the user clicks on a button and it must lock the user into the form on the page so it cannot connect to the app more. It seems to work, because in "managing users and groups" - section, the user is locked. In any case, the user CAN still access my application. I use the default login page.

    This is the code of my approach:

    BEGIN

    UPDATE user
    SET batch = '0'
    WHERE user_id =: P45_user_ID;

    APEX_UTIL. LOCK_ACCOUNT (p_user_name = > upper (:P45_USERNAME));)
    commit;
    END;

    The update of the user to the table is just for information, I do not use the connection table. What might have gone wrong? Solutions, tips or advice are appreciated!

    -Friday-

    Published by: 943770 on the 30.06.2012 03:01

    Hi 943770,

    have you checked the setting "Account of Expiration and locking" (as an admin workspace go to Administration-> Service manage-> Set Workspace Preferences) or
    the parameter "require the user account Expiration and locking" (as long as an administrator of the instance go to manage Instance-> Security-> Login control workspace) if one of those is enabled?

    Help text for "Account Expiration and locking":

    Make a selection to determine whether the end user Application Express accounts can be expired or locked.
    This feature applies only to the user accounts created using the user Application Express management interface. Available options include:
    Enable
    Disable
    This function provides additional authentication for applications security. If you select Enable, user account passwords expire after a configurable time period,
    accounts will be locked after a number of configurable authentication failures, and passwords can be configured to expire after the first use.
    If the Application Express Administrator for this installation set Expiration account user require setting environment and lock Yes, this means that the function must be
    allowed for all the workspaces and the element display turn on and cannot be changed by the administrator of the workspace.

    Concerning
    Patrick
    -----------
    My Blog: http://www.inside-oracle-apex.com
    APEX Plug-Ins: http://apex.oracle.com/plugins
    Twitter: http://www.twitter.com/patrickwolf

  • Locked user SYS and SYSTEM

    DB version: 11.2.0.2
    Operating system: Solaris 10

    In our production of DBs, I noticed that the SYS and SYSTEM users are locked
    $ sqlplus / as sysdba
    
    SQL*Plus: Release 11.2.0.2.0 Production on Thu Jan 19 14:21:34 2012
    
    Copyright (c) 1982, 2010, Oracle.  All rights reserved.
    
    
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production
    With the Partitioning option
    
    SQL> select username, account_status from dba_users where username like 'SYS%';
    
    USERNAME                       ACCOUNT_STATUS
    ------------------------------ --------------------------------
    SYSTEM                         LOCKED
    SYS                            LOCKED
    1. How can I connect to the SYS account despite the confinement. Is it because I have connected via external authentication?

    2. don't lock the user SYS standard practice? If so, why?

    1. How can I connect to the SYS account despite the confinement. Is it because I have connected via external authentication?

    you are the owner of the HOUSE of the ORACLE, you need to connect. Yes its because of external authentication.
    Of course you can not connect the user to the system. Have you tried?

    2. don't lock the user SYS standard practice? If so, why?

    Depends on the security, some cases, a user will be created with DBA roles.

  • How to remove the oracle application user?

    Hi experts,


    How can I make user oracle application? I know only two options to lock and abandon backend as removing ro in fnd_users

    What is recommecnde? Please give the right way. "

    Thanks and greetings '
    VD

    Hello

    It's not a bug, user application records can be referenced in the databases/applications and their deletion would cause referential integrity problems.

    Kind regards
    Hussein

  • How to find out which locked user account

    We had production type schema locked account this morning. I checked the profile which this user belongs and it has 3 times for connection attempts failed. My question is how to know what the user had 3 unsuccessful login attempts and block this account.

    Version Oracle 8.1.7

    Use them views DBA_AUDIT_SESSION or DBA_AUDIT_TRAIL (I suggest to use the former).

    Justin

  • Locked user account

    We just have to upgrade to Oracle. I have one of the three usernames that cannot connect to. I get:

    An error occurred during the connection:
    Type: java.sql.SQLException error Code: 28000 SQL State: 99999
    Message: ORA-28000: the account is locked

    I had a tech person trying to connect with the wrong password. I tried to unlock the account with:

    change the xxxxxxx user account unlock;

    He says that the user has been changed, but I still get the same error message. What Miss me?

    Thank you

    HII...

    The values in the default profile limits seems to be Ok. Although you can try changing the FAILED_LOGIN_ATTEMPTS to unlimited.

    change the default profile limit failed_login_attempts unlimited;

    Test again the administration with the password utilities.

    Anand

  • How to unlock a locked user account...

    I don't have a single user account, an administrator, and he has always been unlocked.  But the other day, I tried to access the Task Manager and he told me it had been disabled by the administrator, but I and I did that.  I disconnected and when I logged in I noticed that my the deu was being blocked.  I can't understand how to unlock the user account.  Please help me.

    http://support.Microsoft.com/kb/242917

    Cannot lock a "locked" computer administrator

    See you soon. Mick Murphy - Microsoft partner

  • PC goes in / lock user every minute switch

    Computer runs very slowly and screen saver/lock/switch user cycles every minute.

    Do it the less shrunk down to the fact that some programs are reset timeout to 1 minute as well as screen saver automatically check the "logon screen" option.  When I change this setting, then click on apply or OK, he immediately returned to 1 minute and switch 'on' the logon screen display option.
    This is in regards to my dad's computer.  He has recently 'installed an update of a popup"and did before causing viruses.  The only problem is that AVG is executed and updated (and was when he made it) and a full AVG scan came up with nothing.  I am running Microsoft Safety Scanner in safe mode - that reminds me to mention that this problem occurs in safe mode as well (same program apparently running and changing this setting).
    Thoughts?
    Thank you

    Hi mpccmd,

    1. did you of recent changes on the system?

    Method 1:

    You can try to change the registry settings and check if it helps.

    To open Registly follow the steps below:

    a.Click a.Click on start, type regedit in start search, and then press ENTER.

    b.Navigate to HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Currentversion\

    c.Verify the following entries have the value default values.

    HKEY_CURRENT_USER\Control Panel\Desktop

    ScreenSaverActive = 1

    ScreenSaverIsSecure = 0

    ScreenSaverTimeOut = time in seconds

    SCRNSAVE. EXE = points to the location of the screen saver

    d. exit Registry and retstart the computer.

    Important: The above mentioned steps show you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs.

    For more information about how to back up and restore the registry, follow the steps from the link below:

    Back up the registry

    Method 2:

    You can also check that the problem occurs in the new user account.

    Create a user account

    If the problem does not occur, then check out the following link and follow the steps to repair the corrupted user profile:

    Difficulty of a corrupted user profile

    2nd number

    1 update you tried to install?

    2. What is the result of the Microsoft safety scanner?

    You can try to perform a restore of the system to a prior restore point you have been affected by the issue.

    Note: When you perform the system restore to restore the computer to a previous state, programs and updates that you have installed are removed.

    To run the system restore, you can consult the following link:

    System restore

    System Restore: frequently asked questions

    Hope this information is useful.

  • Locked user folder

    I recently migrated an admin to a new account admin account, because the taskbar was faulty.

    I deleted the old admin account and the old user folder, but now the new user folder has a lock on it and it doesn't allow me to rename.

    I tried all the processes for appropriating a file or files by changing the permissions, but it is still blocked.

    It's strange how it allows me to open the folder and containing files, but I can't rename it.

    If I remove the tab reading ony it just comes back to read-only. I am currently the only user with an administrator account.

    I deleted the old admin account and the old user folder, but now the new user folder has a lock on it and it doesn't allow me to rename.

    -> No doubt, you are referring to your profile folder. Renaming you would cause massive problems. Don't even try!

    I am currently the only user with an administrator account.

    -> It's high-risk stuff. If something goes wrong with your single account, then you will be deeply distressed. You must create, test, and document a second admin account immediately.

Maybe you are looking for