SYS user password not recorded in user_history$ in 11g !!
Hi Friends
During an audit requirement , it is required to get the password change history for various users . All the password change date is recorded in user_history$ .This was working for all users including SYS user uptill 10g . From 11g onwards , entry for SYS user is not recorded in user_history$ .
SQL> select name,password_date from sys.user$,user_history$ where user$.user# = user_history$.user# and name in ('SYS','SYSTEM') order by name, password_date;
NAMEÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â PASSWORD_
------------------------------ ---------
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 28-MAR-13
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 01-MAY-13
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 30-MAY-13
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 03-JUL-13
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 04-AUG-13
So , in the above output , it is showing password change for SYSTEM user but not SYS . Although , the password for SYS user also gets changed monthly . This can be proved by a test case also in any 11g database .In 10g , SYS user was also recorded in user_history$ .
During an audit requirement , it is required to get the password change history for various users . All the password change date is recorded in user_history$ .This was working for all users including SYS user uptill 10g . From 11g onwards , entry for SYS user is not recorded in user_history$ .
SQL> select name,password_date from sys.user$,user_history$ where user$.user# = user_history$.user# and name in ('SYS','SYSTEM') order by name, password_date;
NAMEÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â PASSWORD_
------------------------------ ---------
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 28-MAR-13
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 01-MAY-13
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 30-MAY-13
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 03-JUL-13
SYSTEMÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â 04-AUG-13
So , in the above output , it is showing password change for SYSTEM user but not SYS . Although , the password for SYS user also gets changed monthly . This can be proved by a test case also in any 11g database .In 10g , SYS user was also recorded in user_history$ .
0