No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Oracle DB password become due result CMS log in failed

Publication Date:  2015-11-18 Views:  412 Downloads:  0
Issue Description

a customer site, when log in CMS web page, display below information:"A database exceptioin occurred when an agent logs in"

 

eSpace CC:V200R001C50, Oracle11G



 

Alarm Information
none
Handling Process

First log in Oracle DB and check its running status:

use sqlplus connect to Oracle (for example ICD user), display below information:


ERROR:
ORA-28001: the password has expired

step1 use oracle user log in DB server

step2 connect to DB

$ sqlplus / as sysdba

step3 check the use profile, usually it is by default

sql>select username,PROFILE FROM dba_users;

USERNAME                 PROFILE

------------------------------ ------------------------------

SYS                        DEFAULT

ICD                        DEFAULT

......                        ...... 

step4 check the profile password period of validity configuration, it is 180 days limited.

sql> select * FROM dba_profiles s WHERE s.profile='DEFAULT' AND resource_name='PASSWORD_LIFE_TIME';

PROFILE          RESOURCE_NAME            RESOURCE    LIMIT

------------     ---------------------------     --------------  ---------------

DEFAULT         PASSWORD_LIFE_TIME     PASSWORD   180

step5 change the password period of validity to unlimited

sql> alter PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED;

step6 check the new configuration if take effect

sql> select * FROM dba_profiles s WHERE s.profile='DEFAULT' AND resource_name='PASSWORD_LIFE_TIME';

PROFILE          RESOURCE_NAME            RESOURCE    LIMIT

------------     ---------------------------     --------------  ---------------

DEFAULT         PASSWORD_LIFE_TIME     PASSWORD   UNLIMITED

 

step7 after that, the user not prompt ORA-28001/ ORA-28002 alarm will not get the smae prompt; but the user already get the prompt need to change the password to make the password policy take effect, or else it will still display alarm. the method to change the password is as below:

sql> alter user username identified by original_password 

username” is the user name you want to change password;

original_passwd” is the password you define, you can use old password.

 step8 when Oracle DB user connect to DB reach the maximum number of times, system will prompt "the account is locked". the method to unlock DB user is as below:

alter user username account unlock;

 

Root Cause

Oracle11G create user by default profile, the password will become due in 180 days. if customer does not change password in 180 days, then the DB user can not log in. for this issue, the customer can cancel the password policy of 180 days and change to unlimited.

before the password is due, when use sqlplus connect to Oracle by ICD user, the system will display:

ERROR:
ORA-28002 : the password will expire within 5 days

Solution

As explained in Procedure.

Suggestions

Oracle11G create user by default profile, the password will become due in 180 days. if customer does not change password in 180 days, then the DB user can not log in. for this issue, the customer can cancel the password policy of 180 days and change to unlimited.

END