My Oracle Support Banner

PASSWORD_ROLLOVER_TIME DOES NOT WORK IN CONJUNCTION WITH PASSWORD_GRACE_TIME (Doc ID 2973184.1)

Last updated on JULY 20, 2024

Applies to:

Oracle Database - Enterprise Edition - Version 19.19.0.0.0 and later
Information in this document applies to any platform.

Symptoms

When we create a profile with PASSWORD_GRACE_TIME set to 7 (DEFAULT value) it errors out when PASSWORD_ROLLOVER_TIME is also specified with a value greater than 7. If we set the PASSWORD_GRACE_TIME to a limit 'DEFAULT', the syntax is accepted as valid and the profile is created.. The question is why value '7' is not accepted in combination with PASSWORD_ROLLOVER_TIME. During this excercise, the DEFAULT profile remains unchanged.

 

Failure
#######
SQL>
SQL> CREATE PROFILE "TEST" LIMIT CPU_PER_SESSION UNLIMITED
CPU_PER_CALL UNLIMITED
CONNECT_TIME UNLIMITED
IDLE_TIME UNLIMITED
SESSIONS_PER_USER UNLIMITED
LOGICAL_READS_PER_SESSION UNLIMITED
LOGICAL_READS_PER_CALL UNLIMITED
PRIVATE_SGA UNLIMITED
COMPOSITE_LIMIT UNLIMITED
PASSWORD_LIFE_TIME UNLIMITED
PASSWORD_GRACE_TIME 7 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< Grace time to 7days
PASSWORD_REUSE_MAX 4
PASSWORD_REUSE_TIME UNLIMITED
PASSWORD_LOCK_TIME UNLIMITED
FAILED_LOGIN_ATTEMPTS UNLIMITED
PASSWORD_ROLLOVER_TIME 60 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<roll over time to 60days
PASSWORD_VERIFY_FUNCTION VERIFY_FUNCTION
/  
CREATE PROFILE "TEST" LIMIT CPU_PER_SESSION UNLIMITED
*
ERROR at line 1:
ORA-02377: invalid profile limit PASSWORD_ROLLOVER_TIME




Success
#######

SQL>
SQL> CREATE PROFILE "TEST" LIMIT CPU_PER_SESSION UNLIMITED
CPU_PER_CALL UNLIMITED
CONNECT_TIME UNLIMITED
IDLE_TIME UNLIMITED
SESSIONS_PER_USER UNLIMITED
LOGICAL_READS_PER_SESSION UNLIMITED
LOGICAL_READS_PER_CALL UNLIMITED
PRIVATE_SGA UNLIMITED
COMPOSITE_LIMIT UNLIMITED
PASSWORD_LIFE_TIME UNLIMITED
PASSWORD_GRACE_TIME default <<<<<<<<<<<<<<<<<<<<<<< grace time to 7days
PASSWORD_REUSE_MAX 4
PASSWORD_REUSE_TIME UNLIMITED
PASSWORD_LOCK_TIME UNLIMITED
FAILED_LOGIN_ATTEMPTS UNLIMITED
PASSWORD_ROLLOVER_TIME 60 <<<<<<<<<<<<<<<<<<<<<<<< roll over time to 60days
PASSWORD_VERIFY_FUNCTION VERIFY_FUNCTION
/
 
Profile created.

SQL>
SQL>


################ Default profile have password_grace_time=7 ###########

SQL> col profile format a15
SQL> col resource_name format a25
SQL> col limit format a10
SQL>
SQL> select profile, resource_name, limit from dba_profiles where profile = 'DEFAULT' and RESOURCE_NAME='PASSWORD_GRACE_TIME'
  2  /

PROFILE         RESOURCE_NAME             LIMIT
--------------- ------------------------- ----------
DEFAULT         PASSWORD_GRACE_TIME       7

Changes

 NA

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.