Parameters Used to Secure User Accounts

Table: Initialization and Profile Parameters Used for User Account Security lists initialization and profile parameters that you can set to better secure user accounts.

Initialization and Profile Parameters Used for User Account Security

Parameter	Default Setting	Description
`SEC_CASE_SENSITIVE_LOGON`	`TRUE`	Controls case sensitivity in passwords. `TRUE` enables case sensitivity; `FALSE` disables it.
`SEC_MAX_FAILED_LOGIN_ATTEMPTS`	No default setting	Sets the maximum number of times a user is allowed to fail when connecting to an Oracle Call Interface (OCI) application.
`FAILED_LOGIN_ATTEMPTS`	`10`	Sets the maximum times a user login is allowed to fail before locking the account. Note: You also can set limits on the number of times an unauthorized user (possibly an intruder) attempts to log in to Oracle Call Interface applications by using the `SEC_MAX_FAILED_LOGIN_ATTEMPTS` initialization parameter.
`PASSWORD_GRACE_TIME`	`7`	Sets the number of days that a user has to change his or her password before it expires.
`PASSWORD_LIFE_TIME`	`180`	Sets the number of days the user can use his or her current password.
`PASSWORD_LOCK_TIME`	`1`	Sets the number of days an account will be locked after the specified number of consecutive failed login attempts.
`PASSWORD_REUSE_MAX`	`UNLIMITED`	Specifies the number of password changes required before the current password can be reused.
`PASSWORD_REUSE_TIME`	`UNLIMITED`	Specifies the number of days before which a password cannot be reused.

Note: You can use most of these parameters to create a user profile. See Oracle Database Security Guide for more information about user profile settings.

To modify an initialization parameter, see "Modifying the Value of an Initialization Parameter". For detailed information about initialization parameters, see Oracle Database Reference andOracle Database Administrator's Guide.

Parameters Used to Secure User Accounts

Related Topics