ORACLE概要文件PROFILE

banbanbai

    Use the following clauses to set password parameters. Parameters that set lengths of time—that is, all the password parameters exceptFAILED_LOGIN_ATTEMPTS and PASSWORD_REUSE_MAX—are interpreted in number of days. For testing purposes you can specify minutes (n/1440) or even seconds (n/86400) for these parameters. You can also use a decimal value for this purpose (for example .0833 for approximately one hour). The minimum value is 1 second. The maximum value is 24855 days. For FAILED_LOGIN_ATTEMPTS and PASSWORD_REUSE_MAX, you must specify an integer.
    FAILED_LOGIN_ATTEMPTS      Specify the number of consecutive failed attempts to log in to the user account before the account is locked. If you omit this clause, then the default is 10 times.
　　指定连续登录错误的最大次数，超过这个次数，该账户就会被锁定，默认为10次
    PASSWORD_LIFE_TIME      Specify the number of days the same password can be used for authentication. If you also set a value for PASSWORD_GRACE_TIME, then the password expires if it is not changed within the grace period, and further connections are rejected. If you omit this clause, then the default is 180 days.
　　指定密码的最长有效期；如果设置了 PASSWORD_GRACE_TIME，如果过了这个值设置的宽限期，还没有改密码，密码将会过期；如果你忽略了设置 PASSWORD_LIFE_TIME的值，默认将是180天
　　See Also:
Oracle Database Security Guide for information on setting PASSWORD_LIFE_TIME to a low value    PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX      These two parameters must be set in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the number of password changes required before the current password can be reused. For these parameter to have any effect, you must specify a value for both of them.
　　PASSWORD_REUSE_TIME 和 PASSWORD_REUSE_MAX 必须联合起来使用，
　　    PASSWORD_REUSE_TIME指定口令被更改后，原有口令要隔多少天才能被重新使用，
　　    PASSWORD_REUSE_MAX指定口令被更改多少次后，原有口令才能被重新使用 

• If you specify a value for both of these parameters, then the user cannot reuse a password until the password has been changed the number of times specified for PASSWORD_REUSE_MAX during the number of days specified for PASSWORD_REUSE_TIME.
  For example, if you specify PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to 10, then the user can reuse the password after 30 days if the password has already been changed 10 times.
  
• If you specify a value for either of these parameters and specify UNLIMITED for the other, then the user can never reuse a password.
  
• If you specify DEFAULT for either parameter, then Oracle Database uses the value defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED in the DEFAULT profile. If you have not changed the default setting of UNLIMITED in the DEFAULT profile, then the database treats the value for that parameter as UNLIMITED.
  
• If you set both of these parameters to UNLIMITED, then the database ignores both of them. This is the default if you omit both parameters.
  

    PASSWORD_LOCK_TIME      Specify the number of days an account will be locked after the specified number of consecutive failed login attempts. If you omit this clause, then the default is 1 day.
　　因账户被连续的登录失败后锁定，该参数指定锁定的时间，单位为天，默认值为1天
    PASSWORD_GRACE_TIME      Specify the number of days after the grace period begins during which a warning is issued and login is allowed. If you omit this clause, then the default is 7 days.
　　    口令修改的宽限天数，当宽限期开始时，会在登录时提示一个警告，默认值为7天
    PASSWORD_VERIFY_FUNCTION      The PASSWORD_VERIFY_FUNCTION clause lets a PL/SQL password complexity verification script be passed as an argument to the CREATEPROFILE statement. Oracle Database provides a default script, but you can create your own routine or use third-party software instead.
　　指定用于判断口令复杂度的函数

• For function, specify the name of the password complexity verification routine.
  
• Specify NULL to indicate that no password verification is performed.