暂无图片
分享
朱贺
2019-03-13
oracle db:11.2.0.4 sys用户不受自建profile规则约束

数据库版本:

select version from v$instance;


VERSION

-----------------

11.2.0.4.0


自建了一个profile规则内容如下:

select PROFILE,RESOURCE_NAME,RESOURCE_TYPE,LIMIT from dba_profiles where PROFILE='AUD';


PROFILE        RESOURCE_NAME RESOURCE LIMIT

------------------------------ -------------------------------- -------- ----------------------------------------

AUD        COMPOSITE_LIMIT KERNEL DEFAULT

AUD        SESSIONS_PER_USER KERNEL DEFAULT

AUD        CPU_PER_SESSION KERNEL DEFAULT

AUD        CPU_PER_CALL KERNEL DEFAULT

AUD        LOGICAL_READS_PER_SESSION KERNEL DEFAULT

AUD        LOGICAL_READS_PER_CALL KERNEL DEFAULT

AUD        IDLE_TIME KERNEL DEFAULT

AUD        CONNECT_TIME KERNEL DEFAULT

AUD        PRIVATE_SGA KERNEL DEFAULT

AUD        FAILED_LOGIN_ATTEMPTS PASSWORD 10

AUD        PASSWORD_LIFE_TIME PASSWORD 100


PROFILE        RESOURCE_NAME RESOURCE LIMIT

------------------------------ -------------------------------- -------- ----------------------------------------

AUD        PASSWORD_REUSE_TIME PASSWORD DEFAULT

AUD        PASSWORD_REUSE_MAX PASSWORD DEFAULT

AUD        PASSWORD_VERIFY_FUNCTION PASSWORD VERIFY_FUNCTION_11G

AUD        PASSWORD_LOCK_TIME PASSWORD 3

AUD        PASSWORD_GRACE_TIME PASSWORD 15


  1. orapwd  [IGNORECASE={Y|N}]  -----未重建 默认为Y。

  2. ALTER SYSTEM SET SEC_CASE_SENSITIVE_LOGON = TRUE  未执行。

  3. @$ORACLE_HOME/rdbms/admin/utlpwdmg.sql  --sys已执行

  4. GRANT EXECUTE ON verify_function_11G to te1;


select USERNAME,ACCOUNT_STATUS,PROFILE,AUTHENTICATION_TYPE from dba_users where username in ('TE1','SYS');


USERNAME        ACCOUNT_STATUS PROFILE        AUTHENTI

------------------------------ -------------------------------- ------------------------------ --------

SYS        OPEN AUD        PASSWORD

TE1        OPEN AUD        PASSWORD


问题1:怎么才能让原有用户登录时出现密码规则提示进行密码重置?(以下步骤未出现该提示)

SQL> conn te1/te1

Connected.

SQL> 

问题2:sys用户不受密码规则约束,如何让其受约束?


user:te1

SQL> alter user te1 identified by 123;

alter user te1 identified by 123

*

ERROR at line 1:

ORA-28003: password verification for the specified password failed

ORA-20001: Password length less than 8


user:sys

SQL> alter user sys identified by 123;


User altered.



[oracle@rt2 dbs]$ orapwd file=orapwrs entries=10 password=123456

[oracle@rt2 dbs]$ sqlplus sys/123456 as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Wed Mar 13 12:02:39 2019

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

Connected to:

Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production

With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL> select user from dual;


USER

------------------------------

SYS




收藏
分享
3条回答
默认
最新
Moone

1、alter user test password expire;

2、SYS用户通过密码文件验证,无法使用此规则的。


暂无图片 评论
暂无图片 有用 0
朱贺

感谢指点

暂无图片 评论
暂无图片 有用 0
章芋文
问题已关闭: 问题已经得到解决
暂无图片 评论
暂无图片 有用 0
回答交流
提交
问题信息
请登录之后查看
邀请回答
暂无人订阅该标签,敬请期待~~
暂无图片墨值悬赏