Hi,
Some one could tel me ?

Sometimes a user account is locked and I do not know why?

Can someone tell me how to log the lock?

thank's

On Dec 31, 10:02*am, eliot06 <p.hi... (AT) gmail (DOT) com> wrote:
Check out the DBA_USERS view.

E.g.

SQL> select username, account_status, lock_date
from dba_users
where account_status != 'OPEN';

Possible values for ACCOUNT_STATUS are:

OPEN : account is open
EXPIRED: the password on the account has expired
EXPIRED(GRACE): the password on the account has expired but there is a
grace period to change the password
LOCKED(TIMED): account is locked as as there have been more than
FAILED_LOGIN_ATTEMPTS unsuccessful logins

Addidionally, the ACCOUNT_STATUS can also be:

EXPIRED(GRACE) & LOCKED(TIMED)
EXPIRED & LOCKED
EXPIRED(GRACE) & LOCKED

These are combinations of the above.

For 10gR2, more information can be found here:

http://download.oracle.com/docs/cd/B...4.htm#i1628672

HTH
-g

eliot06 wrote,on my timestamp of 31/12/2010 9:02 PM:

check if the profile associated with the user has a defined attempts limit. If
so, then if the user fails to enter the correct password for that number of
times, the account becomes locked.

gazzag gave you a possible answer.

On Dec 31, 2:02*am, eliot06 <p.hi... (AT) gmail (DOT) com> wrote:
Also check to see if there are tools that use that account. Some
things keep passwords so you don't have to log in again, a browser or
automated job (either within Oracle or the OS) is a typical reason.
In a browser, if you right-click on a screen, view page info, click on
security tab, there is a button to show saved passwords (I think, I
never save passwords myself). For jobs, there should be logs.

Also check your listener.log (lsnrctl status can tell you where it is)
to see if maybe someone is just being stupid and typing the wrong
username or host, or someone really is trying to hack in. I worked at
a large secure site with a 3-strikes password policy, and a disliked
high muckity-muck was DoS'd every day in his general network login.

There may also be sysadmin or web logs, depending on what you are
doing.

jg
--
@home.com is bogus.
http://www.cnn.com/2010/TECH/innovat...ear/index.html