Account Is Locked While Applying a Patch. Patch Fails With ORA-28000.
Error:
ORA-28000 account locked on the apps account
Cause:
The profile option "AD_PATCH_MONITOR_PROFILE" has not been set to "unlimited" and is still set at the default value of "3".
Check the profile option using the following query:
set pagesize 300
col profile format a25
col limit format a10
select PROFILE, RESOURCE_NAME, RESOURCE_TYPE, LIMIT from dba_profiles where profile='AD_PATCH_MONITOR_PROFILE';
Also check for other profiles related to the APPS user account.
Examples of queries that can be used to check the APPS user account :
SQL> select profile , resource_name, limit from dba_profiles where resource_name like '%FAIL%';
SQL> select username, profile from dba_users where username='APPS';
SQL> select username, profile from dba_users where username='APPLSYS';
Solution:
To implement the solution, test the following steps in a development instance and migrate accordingly:
1. Login as SYS or SYSTEM and run:
SQL> alter profile AD_PATCH_MONITOR_PROFILE limit failed_login_attempts unlimited;
SQL> alter profile default limit failed_login_attempts unlimited password_lock_time 1/1440;
SQL> alter user apps account unlock;
Reference metalink doc id 420001.1
Error:
ORA-28000 account locked on the apps account
Cause:
The profile option "AD_PATCH_MONITOR_PROFILE" has not been set to "unlimited" and is still set at the default value of "3".
Check the profile option using the following query:
set pagesize 300
col profile format a25
col limit format a10
select PROFILE, RESOURCE_NAME, RESOURCE_TYPE, LIMIT from dba_profiles where profile='AD_PATCH_MONITOR_PROFILE';
Also check for other profiles related to the APPS user account.
Examples of queries that can be used to check the APPS user account :
SQL> select profile , resource_name, limit from dba_profiles where resource_name like '%FAIL%';
SQL> select username, profile from dba_users where username='APPS';
SQL> select username, profile from dba_users where username='APPLSYS';
Solution:
To implement the solution, test the following steps in a development instance and migrate accordingly:
1. Login as SYS or SYSTEM and run:
SQL> alter profile AD_PATCH_MONITOR_PROFILE limit failed_login_attempts unlimited;
SQL> alter profile default limit failed_login_attempts unlimited password_lock_time 1/1440;
SQL> alter user apps account unlock;
Reference metalink doc id 420001.1
No comments:
Post a Comment