Solved

How to create a user with unlimited password expiry?

  • 28 April 2021
  • 7 replies
  • 1732 views

Userlevel 4
Badge +8

How to create a user with unlimited password expiry?

     I want to create a user ,whose password should not be expired. 

 

 

 

icon

Best answer by Sven Paul 28 April 2021, 16:18

View original

This topic has been closed for comments

7 replies

Userlevel 7
Badge +15

Hi @TatKhandM,

When you go to Oracle users window in the application, there is a field called ‘Expiration Date’. Make sure, there is no date set there for the respective user.

 


Not sure, if this addresses the exact issue you face but hope this is helpful :relaxed:

Best Regards,
Thanushi​​​​​​​

Userlevel 4
Badge +8

Hi ,

    For your info, need to create a user in FSM  

   

 

Userlevel 3
Badge +6

Hi @TatKhandM 

you can use as Password Expire date the year 9999.

This should work and has been used very often in the past for this purpose :wink:

 

Best regards,

Sven

Userlevel 6
Badge +13

Hi @TatKhandM 

Above mentioned methods will do the work for you. From the DB level, you can try it out below.

 

1. Connect to the DB as sysdba
   SQL> connect sys/<password> as sysdba

2. Check the user belong to which profile
    SQL>SELECT username,PROFILE FROM dba_users;

3. Check the password policy for the profile( for example ‘default’):
   SQL>SELECT * FROM dba_profiles s WHERE s.profile='<profile_name>' AND  resource_name='PASSWORD_LIFE_TIME';

4. Change the password expire period of the given profile
   SQL>ALTER PROFILE <profile_name> LIMIT PASSWORD_LIFE_TIME UNLIMITED;

5. Check the password expiry date for the confirmation
   SQL> select username, account_status, EXPIRY_DATE from dba_users where username='<user_name>';


Above change will affect all users assigned to the given profile. If this is not intended you can create a separate profile and assign it to the user and proceed with the changes

 

Eg:-

1. The following statement creates the “app_user2" profile with password limits values set:

CREATE PROFILE app_user2 LIMIT
   FAILED_LOGIN_ATTEMPTS 5
   PASSWORD_LIFE_TIME 60
   PASSWORD_REUSE_TIME 60
   PASSWORD_REUSE_MAX 5
   PASSWORD_VERIFY_FUNCTION verify_function
   PASSWORD_LOCK_TIME 1/24
   PASSWORD_GRACE_TIME 10;

2. Assign a profile to a user
   SQL> ALTER USER <user_name> PROFILE <profile_name>;

Userlevel 7

Hi ,

    For your info, need to create a user in FSM  

   

 

For a specific user, the easiest would be to just extend the Password Expire date on the person record.
 

If you want to change the default expiry date range there’s an app param called PASSWORD_NEXT_EXPIRE_DAYS that you can set.

Userlevel 5
Badge +10

you can change the  oracle profile  ( e.g  DEFAULT) parameters as follows.

 

change the profile limit to unlimited.


SQL> alter profile DEFAULT limit PASSWORD_REUSE_TIME unlimited;

SQL> alter profile DEFAULT limit PASSWORD_LIFE_TIME  unlimited;


Check the password expiry date 

 
SQL> select username, account_status, EXPIRY_DATE from dba_users where username='TEST';
 
USERNAME                       ACCOUNT_STATUS               EXPIRY_DATE
------------------------------ ---------------------------- ---------
TEST                      OPEN                         UNLIMITED

Userlevel 7

Hi @TatKhandM 

Above mentioned methods will do the work for you. From the DB level, you can try it out below.

 

1. Connect to the DB as sysdba
   SQL> connect sys/<password> as sysdba

2. Check the user belong to which profile
    SQL>SELECT username,PROFILE FROM dba_users;

3. Check the password policy for the profile( for example ‘default’):
   SQL>SELECT * FROM dba_profiles s WHERE s.profile='<profile_name>' AND  resource_name='PASSWORD_LIFE_TIME';

4. Change the password expire period of the given profile
   SQL>ALTER PROFILE <profile_name> LIMIT PASSWORD_LIFE_TIME UNLIMITED;

5. Check the password expiry date for the confirmation
   SQL> select username, account_status, EXPIRY_DATE from dba_users where username='<user_name>';


Above change will affect all users assigned to the given profile. If this is not intended you can create a separate profile and assign it to the user and proceed with the changes

 

Eg:-

1. The following statement creates the “app_user2" profile with password limits values set:

CREATE PROFILE app_user2 LIMIT
   FAILED_LOGIN_ATTEMPTS 5
   PASSWORD_LIFE_TIME 60
   PASSWORD_REUSE_TIME 60
   PASSWORD_REUSE_MAX 5
   PASSWORD_VERIFY_FUNCTION verify_function
   PASSWORD_LOCK_TIME 1/24
   PASSWORD_GRACE_TIME 10;

2. Assign a profile to a user
   SQL> ALTER USER <user_name> PROFILE <profile_name>;

you can change the  oracle profile  ( e.g  DEFAULT) parameters as follows.

 

change the profile limit to unlimited.


SQL> alter profile DEFAULT limit PASSWORD_REUSE_TIME unlimited;

SQL> alter profile DEFAULT limit PASSWORD_LIFE_TIME  unlimited;


Check the password expiry date 

 
SQL> select username, account_status, EXPIRY_DATE from dba_users where username='TEST';
 
USERNAME                       ACCOUNT_STATUS               EXPIRY_DATE
------------------------------ ---------------------------- ---------
TEST                      OPEN                         UNLIMITED

As @TatKhandM mentioned this is for FSM, not Apps. FSM doesn’t necessarily run on Oracle.