If it is not changed within this time period,
the account is expired and the password must be changed
before the user can log in successfully.
PASSWORD_VERIFY_
FUNCTION
A PL/SQL script to provide an advanced passwordverification
routine. If NULL is specified (the default), no
password verification is performed.
TABLE 9-4 Password-Related Profile Parameters
Chapter 9: Database Security and Auditing 295
In this example, an account will only be locked for five minutes after the specified number of
login failures.
A parameter value of unlimited means that there is no bound on how much of the given
resource can be used. default means that this parameter takes its values from the DEFAULT profile.
The parameters password_reuse_time and password_reuse_max must be used together;
setting one without the other has no useful effect. In the following example, we create a profile
that sets password_reuse_time to 20 days and password_reuse_max to 5:
create profile lim_reuse_pass limit
password_reuse_time 20
password_reuse_max 5;
For users with this profile, their password can be reused after 20 days if the password has been
changed at least five times. If you specify a value for either of these, and UNLIMITED for the
other, a user can never reuse a password.
As with most other operations, profiles can easily be managed with Oracle Enterprise Manager.
Figure 9-4 shows an example of changing the DEFAULT profile to disconnect the user after only
15 minutes of inactivity.
Pages:
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497