Exercise caution when reinforcing Oracle 11g Database Security

In database security configuration, security reinforcement is required. To ensure database security, however, sometimes, after improper operations or database business account password modification, the configuration of database connection for the program is encapsulated in jar, if the configuration information of the connected database in jar is not modified. This will cause serious consequences to the business account of the database.

Therefore, it is especially important to understand the status of Oracle Security database users. Next, let's take a look at the various user statuses in the oracle database.

ORACLE database users have multiple statuses. You can view the USER_ASTATUS_MAP view.

SQL> col status for a30
SQL> select * from user_astatus_map;

STATUS # STATUS
----------------------------------------
0 OPEN
1 EXPIRED
2 EXPIRED (GRACE)
4 LOCKED (TIMED)
8 LOCKED
5 EXPIRED & LOCKED (TIMED)
6 EXPIRED (GRACE) & LOCKED (TIMED)
9 EXPIRED & LOCKED
10 EXPIRED (GRACE) & LOCKED

9 rows selected.

Through the above query, we can see that the account in Oracle has a total of 9 different states, corresponding to the account_status field in the dba_users view.
Next, I will give a brief description of the meaning and situations of each State to facilitate future system management and maintenance.

The preceding nine States show that the independent States are only OPEN, EXPIRED, LOCKED, EXPIRED (GRACE), and LOCKED (TIMED. The other four are just combinations of the previous forms.
Or you can understand it as follows:
The preceding nine states can be divided into two categories:
1. Basic status (the first five are basic statuses: 0 OPEN, 1 EXPIRED, 2 EXPIRED (GRACE), 4 LOCKED (TIMED), and 8 LOCKED );
2. Combination status (the last four are combination statuses: 5 EXPIRED & LOCKED (TIMED), 6 EXPIRED (GRACE) & LOCKED (TIMED), 9 EXPIRED & LOCKED, 10 EXPIRED (GRACE) & LOCKED );
You can use STATUS # To obtain two combinations of the last four states. Master the first five options.

For more information, see:
OPEN: This is the most common one. It indicates that this account is available and has no restrictions.
LOCKED: indicates that the account is LOCKED by the DBA. Generally, the account is LOCKED (unlock) through alter user username account );
EXPIRED: indicates that the account has been set to expire with the password. You are required to change the password next time you log on (the system will prompt you to change the password upon the first login after the account is set to expire)
EXPIRED (GRACE): After grace is set (the number of days after the password expires after the first successful logon, the password can be changed. During this period, the account is reminded to change the password and can be logged on normally,
Account_status is displayed as EXPIRED (GRACE ).
LOCKED (TIMED): this status indicates that the number of failed logins exceeds FAILED_LOGIN_ATTEMPTS and is automatically LOCKED by the system. Note that the DEFAULT value is 10 in Oracle 10 Gb.

EXPIRED & LOCKED: indicates that the account is set to expire and LOCKED.
EXPIRED (GRACE) & LOCKED (TIMED): When account_stutus is EXPIRED (GRACE), the number of login attempts failed by the user exceeds FAILED_LOGIN_ATTEMPTS, which is automatically LOCKED by the system.
EXPIRED & LOCKED (TIMED): When the account expire is set, the number of logins failed by the user exceeds FAILED_LOGIN_ATTEMPTS, which is automatically LOCKED by the system.
EXPIRED (GRACE) & LOCKED: The status after the user account_status is EXPIRED (GRACE) and the account is manually LOCKED by the DBA

1 2 Next Page