The 8.7.1 SQL*Plus does not handle ORA-28002 warnings when connecting to an
8.1.7 database account that is in the grace period (dba_users.account_status =
'EXPIRED(GRACE)'). It is listed as BUG# 1326865 on MetaLink, with a patchset
available for various OS platforms. Including mine! (I almost never get bug
fixes on UnixWare 7). I also found that some third party software had the same
bug while others didn't (like TOAD).
----- Original Message -----
Sent: Tuesday, August 27, 2002 7:10
PM
Subject: password aging and expiration in
oracle 8.1.7
Hi
All,
I am trying to implement the password aging and expiration. The
password for some of the users have expired on August 23, 2002. When I try to
login it does not give any warning. Only thing I observed that the
account_status was changed from OPEN to EXPIRED(GRACE) during my first attempt to
login.
Could any of you
explain me, why the warning message is not appearing when I attempt to login
during the grace period.
Am I
missing something. Following email from Richard explains how should it
work.
Thanks,
Ashoke
-----Original
Message-----
From: Richard Huntley
[mailto:[EMAIL PROTECTED]]
Sent: Monday, July 22, 2002 3:59
PM
To: Multiple recipients of list ORACLE-L
Subject: RE:
How to notify the password expiration in oracle?
From the 8i docs:
Password Aging and Expiration
DBAs use the CREATE PROFILE statement to specify a maximum
lifetime for passwords. When the specified amount of time passes and the
password expires, the user or DBA must change the password. The following
statement indicates that ASHWINI can use the same password for 90 days
before it expires:
CREATE PROFILE prof LIMIT
FAILED_LOGIN_ATTEMPTS 4
PASSWORD_LOCK_TIME 30
PASSWORD_LIFE_TIME 90;
ALTER
USER ashwini PROFILE prof;
DBAs can also specify a grace period using the CREATE
PROFILE statement. Users enter the grace period upon the first attempt to
login to a database account after their password has expired. During the
grace period, a warning message appears each time users try to log in to
their accounts, and continues to appear until the grace period expires.
Users must change the password within the grace period. If the password is
not changed within the grace period, the account expires and no further
logins to that account are allowed until the password is changed. Figure
22-2 shows the chronology of the password lifetime and grace period.
