Keep Password History
Keep: Specifies the number of times a password must be changed before it can be
reused. Keep for is disabled if a value is specified in this field.
Keep for: Limits the number of days before a password can be reused after it
expires. Keep is disabled if a value is specified in this field.
Enforce Password Complexity
Allows a PL/SQL routine to be used for password verification when users who are
assigned this profile log into a database. This PL/SQL routine must be locally
available for execution on the database to which this profile applies.
Oracle provides a default script (utlpwdmg.sql), however, you can also create your
own routine, or use third-party software as an alternative. The password
verification routine must be owned by SYS.
NULL (no password verification) is set by default.
Lock account on failed logon
Lock after: Limits the number of failed logon attempts allowed before a user is
locked out from the account.
Lock for: Specifies the number of days the account is locked after failing the
specified number of logon attempts. If UNLIMITED is specified, only the database
administrator can unlock the account.
Note: If Default is selected for any password options, values defined in the Default
profile are used.
Create Like Profile
To create a new profile that has identical parameter settings to an existing profile:
1.
Select the profile to be copied from the navigator.
Managing Database Security
9-23
Profiles Folder
2.
Choose Create Like from the Profile menu. The Create Profile property sheet
appears.
3.
Specify a profile name and modify the property sheet parameters if necessary.
4.
Click the Create button.
You can also perform this operation by selecting a profile from the tree or multi-
column list and choosing the Create Like menu option. You must enter the name of
the new profile.
The Create Like property sheet is identical to the Create Profile property sheet. See
Creating a Profile on page 9-21 for information about the property sheet.
Altering a Profile
To alter the resource limits for an existing profile:
1.
Select the profile to be altered from the navigator. The Profile property sheet
appears.
2.
Modify the resource limits as necessary.
3.
Click the Apply button.
You can also use the Quick Edit property sheet to modify a profile by selecting a
profile from the multi-column list using the right mouse button and choosing
Quick Edit from the context-sensitive menu.
The Quick Edit property sheet is identical to the Create Profile property sheet
except that the name field is read-only. See Creating a Profile on page 9-21 for
information about the property sheet.
In the SQL Worksheet, you can use the SQL command ALTER RESOURCE COST
to specify the weights for the resources in the Composite Limit. For information
about the ALTER RESOURCE COST command, see the Oracle Server SQL Reference.
Showing Profile Dependents and Dependencies
To display dependents for a particular profile:
1.
Select a profile from the tree list.
2.
Choose Show Dependencies from the Profiles menu.
Dependencies are organized by user. Expanding individual users in the
Dependencies Viewer displays the schema objects, roles, and privileges associated
with that user.
9-24Oracle Enterprise Manager Administrator’s Guide
Profiles Folder
Removing a Profile
To remove a profile that is no longer needed:
1.
Select the profile to be deleted from the navigator.
2.
Choose Remove from the Profile menu. The Remove Profile alert box appears.
The Remove Profile alert box indicates if the profile you wish to drop is assigned to
any users. If you drop a profile that is assigned to users, Security Manager assigns
the DEFAULT profile to them.
3.
Click OK.
Note: You cannot drop the DEFAULT profile.
Assigning a Profile to Users
To assign a profile to multiple users in the database:
1.