Hello. I have just installed Oracle 10g database, and the system account keeps getting locked out. The note in Enterprise Manager says Locked(Timed), so I know it is a timed lockout. I have unlocked, expired password, changed password and everything I know to do, but it still keeps happening. I have not see this in previous versions of Oracle, so what did I do wrong? How can I correct the problem? Thanks. Deanna
I am wondering how you fixed it, I just upgraded a database to 10Gr2 and the system account keeps locking, which is not good as I have the system account running user managed backups. It has the default profile, but there is nothing in this profile that says anything about auto locking the account after x amount of time..
In 10g, the DEFAULT profile was changed to lock accounts after 10 unsuccessful login attempts. I'd wager that you have a script somewhere that is attempting to log in to the database using the SYSTEM account with an incorrect password which manages to lock the account.
There is nothing in the DEFAULT profile that ships with 10.2 that would lock an account after a period of time, no. You could certainly modify the DEFAULT profile to force passwords to change after a period of time, but that's not something Oracle delivered.
You are right. I've password complexity on my database and even if I create account with profile which have failed_login_attempts set to default, oracle will lock this account if I'll try to connect there ten times with wrong password. In 9i if there was default means that this user may try to connect with wrong password as many times he want and account will not lock themself. In 10g this was changed.
Even I have faced similar issue....that some of users keeps getting locked with status LOCKED(TIMED). After some research we found that the FAILED_LOGIN_ATTEMPTS attribute for the DEFAULT profile has been changed (in oracle 10g) from UNLIMITED to 10.
To get rid off this create a new profile with FAILED_LOGIN_ATTEMTS to unlimited. Better not to alter the existing DEFAULT profile for security concerns.