Skip to content
  • About
Search
Close

Geodata Master

Oracle Database Technical Articles & GeoSpatial Data Technology

Month: August 2021

Oracle 19c (19.12) has introduced New Security Feature “Gradual Database Password Rollover”

August 6, 2021August 6, 2021 arcsdegeoLeave a comment

Oracle has back-ported “Gradual Database Password Rollover” security feature that was initially introduced in Oracle 21c to Oracle 19c with July 2021 RU (Release Update- 19.12) and there is no need to change the compatibility parameter.

Reference link: https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/release-changes.html#GUID-FDE1D67B-1766-48E1-89EE-7F8505A4EF83

This great new feature is very much needed and great addition from Oracle (Thank You Oracle)….if there is a need to change passwords for critical applications/systems this will require application shutdown first then updating the “new” password in multiple places of the application….with this new feature you can change the password without the need of application outage/downtime and there will be NO Locking of the account taking place as both old & new passwords will be authenticated successfully by the database until rollover period is finished.

T Explore it I will create a new profile called “DEFAULT2” with parameter PASSWORD_ROLLOVER_TIME set to 1 day:

CREATE  PROFILE DEFAULT2

LIMIT

    COMPOSITE_LIMIT UNLIMITED

    SESSIONS_PER_USER UNLIMITED

    CPU_PER_SESSION UNLIMITED

    CPU_PER_CALL UNLIMITED

    LOGICAL_READS_PER_SESSION UNLIMITED

    LOGICAL_READS_PER_CALL UNLIMITED

    IDLE_TIME UNLIMITED

    CONNECT_TIME UNLIMITED

    PRIVATE_SGA UNLIMITED

    FAILED_LOGIN_ATTEMPTS 5

    PASSWORD_LIFE_TIME 360

    PASSWORD_REUSE_TIME 1

    PASSWORD_REUSE_MAX 4

    PASSWORD_VERIFY_FUNCTION ORA12C_STIG_VERIFY_FUNCTION

    PASSWORD_LOCK_TIME 1

    PASSWORD_GRACE_TIME 30

    PASSWORD_ROLLOVER_TIME 1;

  SQL> CREATE USER emad1 IDENTIFIED BY EMAD_first_prm221d

     PROFILE DEFAULT2

      DEFAULT TABLESPACE “USERS”

      TEMPORARY TABLESPACE “TEMP”;

SQL> grant create session to emad1 ;

SQL> select username,account_status,profile,authentication_type  from dba_users where username=’EMAD1′;

Now, I will change the password to a different value:

SQL> alter user emad1 identified by EMAD_first_prm33zd;

If you query the dba_users view, you find that account_status is now changed from “OPEN” to “OPEN & IN ROLLOVER”

NOTE: What will happen if you change the password again, in this case Only the first password and the third one will authenticate successfully….so if you change the password multiple times only 2 passwords are valid for authentication (the first initial password, and the last password reset).

Another side note…. that maximum number of days allowed for the value of the parameter “PASSWORD_ROLLOVER_TIME” is 60 (which is 60 days), and minimum value is 1 hour.

To forcefully end the rollover period you can execute the following SQL command:

SQL> alter user emad1 expire password rollover period;

Checking SYS.USER$ table, you will see the value of ASTATUS column changed from “32” to “0” , zero is the value after the rollover period is finished. So the value of “32” indicates that the database account is in the “rollover” phase.

Advertisement

Blog Stats

  • 718,555 hits

Recent Posts

  • Oracle Database DATAPATCH Parameters and Pre-requisite Check (sanity_checks)
  • Oracle Database Listener Log Rotation
  • Oracle data patch error Archived patch directory is empty
  • Installing Workspace Manager in Oracle 19c
  • Oracle 19c Spatial and ORA-600 [kdsgrp1-kdsgrp] error
Follow Geodata Master on WordPress.com

Top Posts & Pages

  • RMAN List Backup Summary command
  • Oracle data patch error Archived patch directory is empty
  • Oracle Database DATAPATCH Parameters and Pre-requisite Check (sanity_checks)
  • Oracle Database Product Life Cycle Support 19c,18c, 12cR2 Long Term & Innovation Releases !
  • Oracle PDB and when is DAPTATCH required to be executed
  • Performing Import Data Pump with EXCLUDE=STATISTICS
  • INS-08101 Unexpected error while executing the action at state: 'SupportedOSCheck'
  • export data pump errors ORA-39014 ORA-39029 ORA-31671 ORA-04030
  • Oracle PSU July 2018 error - ORA-20001: Latest xml inventory is not loaded into table
  • ORA-31633: unable to create master table while performing expdp operation

Archives

  • January 2023
  • December 2022
  • October 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • March 2022
  • February 2022
  • January 2022
  • October 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • April 2020
  • March 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • November 2018
  • October 2018
  • September 2018
  • August 2018
  • July 2018
  • May 2018
  • April 2018
  • March 2018
  • February 2018
  • January 2018
  • December 2017
  • November 2017
  • October 2017
  • September 2017
  • August 2017
  • July 2017
  • June 2017
  • May 2017
  • April 2017
  • March 2017
  • February 2017
  • January 2017
  • December 2016
  • November 2016
  • October 2016
  • September 2016
  • August 2016
  • July 2016
  • June 2016
  • April 2016
  • February 2016
  • January 2016
  • December 2015
  • November 2015
  • October 2015
  • September 2015
  • August 2015
  • July 2015
  • June 2015
  • May 2015
  • April 2015
  • March 2015
  • February 2015
  • January 2015
  • December 2014
  • November 2014
  • October 2014
  • September 2014
  • August 2014
  • July 2014
  • June 2014
  • May 2014
  • April 2014
  • March 2014
  • February 2014
  • January 2014
  • December 2013
  • November 2013
  • October 2013
  • September 2013

Recent Comments

Beau S on Oracle PSU July 2018 error…
Jeffrey on In-Memory Database Management…
Oracle Database Immu… on Oracle Database 19c Blockchain…
Rajesh on Oracle Database java component…
Oracle database Unif… on Exploring Oracle 12c Unified…

Search in my blog

Follow Geodata Master on WordPress.com

Top Posts & Pages

  • RMAN List Backup Summary command
  • Oracle data patch error Archived patch directory is empty
  • Oracle Database DATAPATCH Parameters and Pre-requisite Check (sanity_checks)
  • Oracle Database Product Life Cycle Support 19c,18c, 12cR2 Long Term & Innovation Releases !
  • Oracle PDB and when is DAPTATCH required to be executed
  • Performing Import Data Pump with EXCLUDE=STATISTICS
  • INS-08101 Unexpected error while executing the action at state: 'SupportedOSCheck'
  • export data pump errors ORA-39014 ORA-39029 ORA-31671 ORA-04030
  • Oracle PSU July 2018 error - ORA-20001: Latest xml inventory is not loaded into table
  • ORA-31633: unable to create master table while performing expdp operation

Blog Stats

  • 718,555 hits

Archives

  • January 2023
  • December 2022
  • October 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • March 2022
  • February 2022
  • January 2022
  • October 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • April 2020
  • March 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • November 2018
  • October 2018
  • September 2018
  • August 2018
  • July 2018
  • May 2018
  • April 2018
  • March 2018
  • February 2018
  • January 2018
  • December 2017
  • November 2017
  • October 2017
  • September 2017
  • August 2017
  • July 2017
  • June 2017
  • May 2017
  • April 2017
  • March 2017
  • February 2017
  • January 2017
  • December 2016
  • November 2016
  • October 2016
  • September 2016
  • August 2016
  • July 2016
  • June 2016
  • April 2016
  • February 2016
  • January 2016
  • December 2015
  • November 2015
  • October 2015
  • September 2015
  • August 2015
  • July 2015
  • June 2015
  • May 2015
  • April 2015
  • March 2015
  • February 2015
  • January 2015
  • December 2014
  • November 2014
  • October 2014
  • September 2014
  • August 2014
  • July 2014
  • June 2014
  • May 2014
  • April 2014
  • March 2014
  • February 2014
  • January 2014
  • December 2013
  • November 2013
  • October 2013
  • September 2013
Create a free website or blog at WordPress.com.
Back to top
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
  • Follow Following
    • Geodata Master
    • Join 27 other followers
    • Already have a WordPress.com account? Log in now.
    • Geodata Master
    • Customize
    • Follow Following
    • Sign up
    • Log in
    • Report this content
    • View site in Reader
    • Manage subscriptions
    • Collapse this bar
 

Loading Comments...