Oracle Database Profile
Published by : Obay Salah , November 19, 2024
It is for managing the password as well as the resources, after how long will the password be terminated? What is the number of failed attempts before your account is closed? How many SESSIONs does the user allow to open in the database?
And other questions that the profile must answer.
As we mentioned earlier, any user in the database must have a PROFILE. If this is not specified upon creation, the ORACLE SERVER will grant the user a PROFILE called DEFAULT.
This PROFILE is created with the creation of the database and cannot be deleted from the database.
Of course, you can create, edit and delete a PROFILE from the database.
The question now is what are the points that the PROFILE manages regarding the password?
FAILED_LOGIN_ATTEMPTS: The number of failed attempts by the user to enter the database before his account is closed.
PASSWORD_LIFE_TIME: To specify the number of days in which the user can enter the database with the password before it expires.
PASSWORD_REUSE_TIME: Specifies the number of days before the password is used again, if this option is specified the option must be
PASSWORD_REUSE_MAX:UNLIMITED = PASSWORD_REUSE_MAX Specifies the number of passwords that have been changed before they are used again, if this option is specified the option must be
PASSWORD_REUSE_TIME=UNLIMITED.
PAWWORD_LOCK_TIME: Specifies the number of days before this user is locked.
PASSWORD_GRACE_TIME: Specifies the number of days after which warnings are issued to terminate the current password.
PASSWORD_VERFY_FUNTION: Specifies the function that draws the password selection policy, for example, how many characters the password should be.
As for the available resources, the following is specified:
CONNECT TIME: To specify the minutes allowed for the user connected to the database before his connection is automatically disconnected.
IDLE TIME: To specify the minutes allowed for the user connected to the database to remain idle before his connection is automatically disconnected.
SESSIONS CONCURRENT: To specify the number of SESSIONS allowed for the user to connect to the database.
PRIVATE SGA: To specify the space available to the user in the PRIVATE SGA if we are working in SERVER SHARED mode.
Let's now assume that we want to create a new PROFILE named NEWPROFILE.
CREATE PROFILE NEWPROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3 PASSWORD_LOCK_TIME UNLIMITED PASSWORD_LIFE_TIME 60 PASSWORD_REUSE_TIME 60 PASSWORD_GRACE_TIME ٧ CONNECT_TIME 1000 IDLE_TIME 30 SESSIONS_PER_USER UNLIMITED;
What if we want to modify the above profile: -
ALTER PROFILE NEWPROFILE LIMIT SESSIONS_PER_USER 5;
Of course this profile can be granted when the user is created.
To receive the profile:
DBA_PROFILES.
Let's assume for example that we want to know the details of the PROFILE .NEWPROFILE.
SELECT RESOURCE_NAME,LIMIT FROM DBA_PROFILES WHERE PROFILE='NEWPROFILE';
If we want to know all the profiles in the database.
This profile can also be deleted
DROP PROFILE NEWPROFILE CASCADE;
Comments
no comment yet!