Why Locked Out Users Can Be Used As Proxy Users ? (Doc ID 580488.1)

Last updated on JUNE 19, 2017

Applies to:

Oracle Database - Enterprise Edition - Version 10.1.0.3 to 11.2.0.2 [Release 10.1 to 11.2]
Information in this document applies to any platform.

Goal

Why locked out users can be used as proxy users ?

create user u1 identified by u1;

create user u2 identified by u2;

alter user u1 grant connect through u2;

ALTER PROFILE default limit FAILED_LOGIN_ATTEMPTS 3
PASSWORD_LOCK_TIME 10;

alter user u2 profile default;

grant connect to u1,u2;

SQL> conn u2/u
ERROR:
ORA-01017: invalid username/password; logon denied


Warning: You are no longer connected to ORACLE.
SQL> conn u2/u
ERROR:
ORA-01017: invalid username/password; logon denied


SQL> conn u2/u
ERROR:
ORA-01017: invalid username/password; logon denied


SQL> conn u2/u
ERROR:
ORA-28000: the account is locked
Warning: You are no longer connected to ORACLE.

SQL> conn u2[u1]/u2 ====> Proxy connections work fine although U2 is locked !!!
Connected.




Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms