Oracle数据库的安全与管理培训教材.pptVIP

CREATE PROFILE Password Settings Keep the following points in mind while using these profile parameters: The only restriction on the PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX parameters is that when one parameter is set to a value other than DEFAULT or UNLIMITED, the other parameter must be set to UNLIMITED. You can specify either PASWORD_REUSE_TIME or PASSWORD_REUSE_MAX, but not both. Both PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX can be set to UNLIMITED. A CREATE PROFILE Password Settings (continued) Notes: PASSWORD_VERIFY_FUNCTION桾he Oracle-supplied routine is called up if no user function is supplied. ACCOUNT_LOCK_TIME桰f this parameter is set to UNLIMITED, the account is locked forever, and only the security officer can unlock the account. If the resource limitation is disabled, either with the RESOURCE_LIMIT initialization parameter or with the ALTER SYSTEM statement, the behavior of the password management features is still enforced. Password Complexity Verification (continued) When you add a new password verification routine, you must observe the following restrictions. The call must be in the following format. routine_name (userid_parameter IN VARCHAR(30), password_parameter IN VARCHAR(30), old_password_parameter IN VARCHAR(30)) RETURN BOOLEAN The new routine must be assigned as the password verification routine using the user抯 profile or the system default profile: CREATE/ALTER PROFILE profile_name LIMIT PASSWORD_VERIFY_FUNCTION routine_name When you consider adding a PL/SQL routine as a password verify routine, keep the following points in mind: If the password verify routine raises an exception, an appropriate error message is returned and the statement is terminated. The password verify routine is owned by SYS and is executed in system context. If the password verify routine becomes invalid, an appropriate error message is returned and the statement is terminated. System Privileges Each system privilege allows a user to perform a parti