Account Is Locked While Applying a Patch. Patch Fails With ORA-28000.

Account Is Locked While Applying a Patch. Patch Fails With ORA-28000.

Error:

ORA-28000 account locked on the apps account

Cause:

The profile option "AD_PATCH_MONITOR_PROFILE" has not been set to "unlimited" and is still set at the default value of "3".

Check the profile option using the following query:

set pagesize 300
col profile format a25
col limit format a10
select PROFILE, RESOURCE_NAME, RESOURCE_TYPE, LIMIT from dba_profiles where profile='AD_PATCH_MONITOR_PROFILE';

Also check for other profiles related to the APPS user account.

Examples of queries that can be used to check the APPS user account :

SQL> select profile , resource_name, limit from dba_profiles where resource_name like '%FAIL%';
SQL> select username, profile from dba_users where username='APPS';
SQL> select username, profile from dba_users where username='APPLSYS';

Solution:

To implement the solution, test the following steps in a development instance and migrate accordingly:

1. Login as SYS or SYSTEM and run:

SQL> alter profile AD_PATCH_MONITOR_PROFILE limit failed_login_attempts unlimited;
SQL> alter profile default limit failed_login_attempts unlimited password_lock_time 1/1440;
SQL> alter user apps account unlock;

Reference metalink doc id 420001.1