Oracle10g的账户锁定策略

Oracle10g Profile FAILED_LOGIN_ATTEMPTS

Oracle Database 10g在缺省用户管理上有个小的改进，就是FAILED_LOGIN_ATTEMPTS的口令失败尝试变成了10次，这个设置的确有点问题。如果有一个用户不停尝试错误口令，那就会导致用户被锁。

如果恢复之前无限制，可以通过一条命令解决：

alter profile default limit FAILED_LOGIN_ATTEMPTS unlimited;

数据库的profiles信息：

SQL> select * from dba_profiles;

PROFILE RESOURCE_NAME RESOURCE
LIMIT

---------------- -------------------------------- -------- ------------------------------

DEFAULT COMPOSITE_LIMIT KERNEL UNLIMITED

DEFAULT SESSIONS_PER_USER KERNEL UNLIMITED

DEFAULT CPU_PER_SESSION KERNEL UNLIMITED

DEFAULT CPU_PER_CALL KERNEL UNLIMITED

DEFAULT LOGICAL_READS_PER_SESSION KERNEL UNLIMITED

DEFAULT LOGICAL_READS_PER_CALL KERNEL UNLIMITED

DEFAULT IDLE_TIME KERNEL UNLIMITED

DEFAULT CONNECT_TIME KERNEL UNLIMITED

DEFAULT PRIVATE_SGA KERNEL UNLIMITED

DEFAULT FAILED_LOGIN_ATTEMPTS PASSWORD
10

DEFAULT PASSWORD_LIFE_TIME PASSWORD
UNLIMITED

PROFILE RESOURCE_NAME RESOURCE
LIMIT

---------------- -------------------------------- -------- ------------------------------

DEFAULT PASSWORD_REUSE_TIME PASSWORD
UNLIMITED

DEFAULT PASSWORD_REUSE_MAX PASSWORD
UNLIMITED

DEFAULT PASSWORD_VERIFY_FUNCTION PASSWORD
NULL

DEFAULT PASSWORD_LOCK_TIME PASSWORD
UNLIMITED

DEFAULT PASSWORD_GRACE_TIME PASSWORD
UNLIMITED

16 rows selected.