password aging and expiration in oracle 8.1.7

[Mandal, Ashoke]

Title: RE: How to notify the password expiration in oracle?

Hi All,

 

I am trying to implement the password aging and expiration. The password for some of the users have expired on August 23, 2002. When I try to login it does not give any warning. Only thing I observed that the account_status was changed from OPEN to EXPIRED(GRACE) during my first attempt to login.

 

Could any of you explain me, why the warning message is not appearing when I attempt to login during the grace period.

Am I missing something. Following email from Richard explains how should it work.

 

Thanks,

Ashoke

 

 -----Original Message-----
From: Richard Huntley [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 22, 2002 3:59 PM
To: Multiple recipients of list ORACLE-L
Subject: RE: How to notify the password expiration in oracle?

From the 8i docs:

Password Aging and Expiration

DBAs use the CREATE PROFILE statement to specify a maximum lifetime for passwords. When the specified amount of time passes and the password expires, the user or DBA must change the password. The following statement indicates that ASHWINI can use the same password for 90 days before it expires:

CREATE PROFILE prof LIMIT
   FAILED_LOGIN_ATTEMPTS 4
   PASSWORD_LOCK_TIME 30
   PASSWORD_LIFE_TIME 90;
ALTER USER ashwini PROFILE prof;

DBAs can also specify a grace period using the CREATE PROFILE statement. Users enter the grace period upon the first attempt to login to a database account after their password has expired. During the grace period, a warning message appears each time users try to log in to their accounts, and continues to appear until the grace period expires. Users must change the password within the grace period. If the password is not changed within the grace period, the account expires and no further logins to that account are allowed until the password is changed. Figure 22-2 shows the chronology of the password lifetime and grace period.