This discussion is archived
1 Reply Latest reply: Jan 13, 2010 11:13 PM by g777 RSS

Oracle profile incomplete functionality

716211 Newbie
Currently Being Moderated
SQL> select * from dba_profiles where profile LIKE '%RAG%' and resource_name like 'FAI%';

PROFILE RESOURCE_NAME RESOURCE LIMIT
------------------------------ -------------------------------- -------- ----------------------------------------
RAGHU_CHECK1 FAILED_LOGIN_ATTEMPTS PASSWORD 2

SQL> SELECT USERNAME,PROFILE FROM DBA_USERS WHERE USERNAME='RAGHU';

USERNAME PROFILE
------------------------------ ------------------------------
RAGHU RAGHU_CHECK1

SQL> SHOW PARAMETER RESOURCE_LIMIT

NAME TYPE VALUE
------------------------------------ ----------- ------------------------------
resource_limit boolean TRUE

SQL> SELECT NAME,LCOUNT FROM USER$ WHERE NAME='RAGHU';

NAME LCOUNT
---------------------------------------------------------------------------------------------------- ----------
RAGHU 0

SQL>

SQL> define
DEFINE _DATE           = "12-AUG-09" (CHAR)
DEFINE CONNECTIDENTIFIER = "dev" (CHAR)
DEFINE _USER           = "SYS" (CHAR)
DEFINE _PRIVILEGE      = "AS SYSDBA" (CHAR)
DEFINE SQLPLUSRELEASE = "1002000300" (CHAR)
DEFINE _EDITOR         = "Notepad" (CHAR)
DEFINE OVERSION = "Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 - Production
With the Partitioning, OLAP and Data Mining options" (CHAR)
DEFINE ORELEASE = "1002000300" (CHAR)
DEFINE _RC             = "0" (CHAR)
SQL>


sql connection:
OS : windows vista
c:\>sqlplus raghu@dev

SQL*Plus: Release 10.2.0.3.0 - Production on Wed Aug 12 13:17:14 2009

Copyright (c) 1982, 2006, Oracle. All Rights Reserved.

Enter password:
ERROR:
ORA-01005: null password given; logon denied

Question: when oracle prompts for password, i just hit enter ie nothing. It gave ORA-01005 and prompted for next attempt. I expected increment in 'lcount' of user$ table. But it did not happend.

Since FAILED_LOGIN_ATTEMPTS is set 2, i expected account to get locked after 2 attempts, but it did not happend.

After 3 attempts, oracle stpped prompting for username and came back to os prompt. I called same command again and this time i gave wrong password , it incremented user$ and also account got locked after 2 attempts.

Any idea why oracle did not locked account with null password or if this is normal behaviour of oracle, is there any alternative to lock account even for null passowrd ?

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points