Skip to Main Content

Oracle Database Discussions

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

How to generate login delays from failed logins?

oraLaroFeb 9 2018 — edited Feb 9 2018

We're on 12.1.0.2

From oracle 11 , security features can generate login delays to prevent brute force attacks,   (Which can lead DDOS attack but different argument)  << Ive edited this understanding after a re-read

https://docs.oracle.com/database/121/DBSEG/authentication.htm#DBSEG33223

"

Im trying to test this to see what it looks like but not having much luck, I cant generate the 1 second delay.  Ive a test system I can do what I want with.

create user log_test identified by abc

grant connect, resource to log_Test;

-- try incorrect password

conn log_test/123   << try this several times, theres a 1-2 second delay but not any more.  the documentation would seem to suggest that the delay should get ever increasingly longer but it doesnt.  

It may have something to do with FAILED_LOGIN_ATTEMPTS being set to unlimited.  I set a number for that to 100 and applied to the user but still cant generate the delay other than the 1-2 seconds that accompanies any failed login.   What am I missing?

This post has been answered by Jonathan Lewis on Feb 9 2018
Jump to Answer
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Mar 9 2018
Added on Feb 9 2018
7 comments
1,788 views