Re: Failed login attempts

[Ora NT DBA]

Hi Bunyamin,

All I can is that by following these exact steps I get it working!

SQL> select username,action_name,returncode from dba_audit_trail;

USERNAME                       ACTION_NAME                 RETURNCODE LOGOFF_TI
------------------------------ --------------------------- ---------- ---------
....
SYSTEM                         LOGON                                0
SCOTT                          LOGON                             1017
JIM                            LOGON                             1017
16 rows selected

In another window attempt to login a

Bunyamin/dba

SYSTEM                         LOGOFF                               0
SCOTT                          LOGOFF                               0
SYSTEM                         LOGOFF                               0
SYSTEM                         LOGON                                0
SCOTT                          LOGON                             1017
JIM                            LOGON                             1017
BUNYAMIN                       LOGON                             1017
17 rows selected

As far as I can tell this is working.  The retuncode of 1017 indicates
unsuccessfull logins.

John

[EMAIL PROTECTED] wrote:

I tried What you said . but still no rows returns from dba_audit_trail
although failed login attempts occured.



Bunyamin K. Karadeniz
Oracle DBA / Developer
Civilian IT Department
Havelsan A.S. Eskisehir yolu
7.km Ankara Turkey
Phone: +90 312 2873565 / 1217
Mobile : +90 535 3357729

The degree of normality in a database
is inversely proportional to that of its DBA.

----- Original Message -----
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
Sent: Thursday, March 21, 2002 3:48 PM

1.  change the initializaion parameter audit_trail to be:

audit_trail=db
shutdown and restart database

2. connect to the database as a user that has the privilege "AUDIT
SYSTEM" and enter

audit session whenever not successful

at this point you can see these unsuccessful logins by monitoring the
dba_audit_trail view.

John

[EMAIL PROTECTED] wrote:

Hi all,
Which is the best way to keep audit of failed login attempts to the

oracle

server -without turning on full audit?
Thanking you,
---
+---------------------------------------------------+
C.S Waibale Simon
MTN-Uganda,
Cell: +256 77-212655,http://mtn.co.ug
+---------------------------------------------------+

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Ora NT DBA
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).