CODEWITHSUNDEEP
oracle-databaseauthenticationoracle11g
Miguel Ribeiro
Miguel Ribeiro

Reputation: 8184

Oracle changes password

From time to time, Oracle is changing the password for my account. My project has one database pooling for each 60 seconds and another for each 600 seconds. I don't believe this is the cause, but it abruptlies changes the password causing my code to try to login with wrong username or password that leads to an account lock.

The password is always the same and there's no way the program is trying to connect with a different username/password than the valid ones.

Upvotes: 0

Views: 290

Answers (2)

Miguel Ribeiro
Miguel Ribeiro

Reputation: 8184

Well, it turns out that it was a configuration in the company lib that I was not aware of... sorry for all the mess....

Upvotes: 0

Michael Broughton
Michael Broughton

Reputation: 4055

ORA-28000 is not a password change, it is an account lock either by the DBA or because the wrong password has been entered more than FAILED_LOGIN_ATTEMPTS times.

I have to wonder if there isn't one chunck of code somewhere that has a hardcoded, incorrect password that is being run. That or you just get too many people mis-typeing a password in a given time span.

If you want to track failed logins to try and identify what is causing this, check this link: http://www.dba-oracle.com/t_tracking_counting_failed_logon_signon_attempts.htm

Note that, from ORacle 10.2 on, the default for FAILED_LOGIN_ATTEMPTS in profiles is 10, not the unlimited that it used to be. for the default profile, check it with:

SELECT * 
FROM DBA_PROFILES
WHERE  profile = 'DEFAULT' AND resource_name = 'FAILED_LOGIN_ATTEMPTS';

Bet you get 10 back, and that this is the issue. You can update to a higher value, or backl to unlimited e.g. 

ALTER PROFILE default  LIMIT failed_login_attempts UNLIMITED;

(I think that is the right syntax - I'm away from my DB at the moment)

Upvotes: 4

Related Questions