Skip to Main Content

Oracle Database Discussions

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

PASSWORD_ROLLOVER_TIME - check actual expiry date

Björn HenningsAug 30 2024

Hi,

I'm running Oracle Enterprise 19.24 on Linux.

Consider this example, assuming I run it on September 1st:

create profile PWROLLOVER limit password_rollover_time 10;

alter user SCOTT profile PWROLLOVER;
alter user SCOTT identified by "Lion2024";

This means that Scott will be able to use the old and new password until September 10th, after that the old password will expire and only the new one will work. I review this date by checking PASSWORD_CHANGE_DATE from DBA_USERS and the respective LIMIT from DBA_PROFILES.

So far so good.

Now consider this, executed on September 5th:

alter profile PWROLLOVER limit password_rollover_time 30;

To my knowledge, the expiry date of the old password is set when it is changed, so it will remain Sep. 10th.

Q1: Is this correct?

Q2: How/where can I see the actual expiry date for Scott after the profile change?

Thanks!
Bjoern

Comments
Post Details
Added on Aug 30 2024
0 comments
95 views