znajet kto-libo , kak mozhno zalochit USERa k opredelennoj date. Naprimer chtoby USER s 12.12.2003 ne mog rabotat na base.

Zaraneje blagodaren.

tak ne podchodit.
Ja dumal sozdat Profil dlja opredelennoj gruppy polzovatelej i zadat passwort expired naprimer 90 dnej. No eto sovsem drugoje, ne privyazano k opredelennoj date. Neuzheli v oracle net sobstvennogo mechanizma realizujuschego USER Account Date Locking? :(

jesche vopros v tu zhe temu.

Jesli passwort expired, kak skonfigurirovat profile tak, chto-by user ne mog sam passwort izmenit.

Spasibo za pomosch

Naschel v Metalink ochen interesnuju statju:

Abstract
Function that prevents a user from changing his/her password.

Product Name, Product Version
Oracle Server Enterprise Edition


Versions 8.1.7 , 9.0.1 and 9.2.0.
Platform
Generic
Date Created
29-OKT-2002

Instructions
* This program can be run against any database release 8.XX and above.
* This program must be run connected to sqlplus with user SYS or AS SYSDBA

We notice a difference between the command 'ALTER USER' and the command 'PASSWORD'
ALTER USER displays only the message:
ORA-28003: password verification for the specified password failed

PASSWORD displays both messages:
ORA-28003: password verification for the specified password failed
ORA-20009: SORRY, PASSWORD CANNOT BE CHANGED

This behaviour is seen in 8.0.6 and from 8.1.6 onwards (including 9i), not in
8.0.5 or 8.1.5, this is because of bug 1231172 which has been fixed in 9iR2,
see Bug:1231172 for details.

PROOFREAD THIS SCRIPT BEFORE USING IT! Due to differences in the way text
editors, e-mail packages, and operating systems handle text formatting (spaces,
tabs, and carriage returns), this script may not be in an executable state
when you first receive it. Check over the script to ensure that errors of
this type are corrected.


Description
The following program enables a database administrator to prevent some users to
change their password. If many users log on to the database with a single account
for example, it is very important to guarantee that no user can change the password,
thus preventing other users of this common account to log on.


References
Oracle8i Administrator's Guide : Managing Users and Resources
Oracle8i Administrator's Guide : Establishing Security Policies
Oracle8i SQL Reference : CREATE PROFILE
Bug 1231172 ORA-28003 WHEN CHANGING PASSWORD FOR A USER
<Note 132096.1> ORA-28003 Error When Use 'Password Complexity Verification'



Script
-- Create function which prevents a user from changing his password
-- Use of a specific USER PROFILE to activate the function
-- GM/ELN - 02/03/01
-- must be connected internal or sys
--
set term on
set echo on

CREATE OR REPLACE FUNCTION verify_function_fix_pwd (username VARCHAR2,
password VARCHAR2, old_password VARCHAR2) RETURN boolean IS
BEGIN
raise_application_error(-20009, 'SORRY, PASSWORD CANNOT BE CHANGED') ;
END ;
/

--
-- Create a profile which has a limit PASSWORD_VERIFY_FUNCTION
-- associated to the previously cretaed function.
-- This profile must be given to all users who are not allowed to change
-- their password
--

DROP PROFILE FIXPWD CASCADE;
CREATE PROFILE FIXPWD LIMIT PASSWORD_VERIFY_FUNCTION verify_function_fix_pwd;


Sample Output
DROP USER test_pwd;
CREATE USER test_pwd IDENTIFIED by test_pwd
DEFAULT TABLESPACE USERS TEMPORARY TABLESPACE TEMP
ACCOUNT UNLOCK;
GRANT CONNECT TO test_pwd;
ALTER USER test_pwd PROFILE fixpwd;

The piece of code below shows an example of implementation. A user TEST_PWD
was created and granted the profile FIXPWD as above. Now he cannot change his
password, neither with command ALTER USER nor with command PASSWORD (note
that REPLACE keyword is required in 9.2 to prevent getting ORA-28221).

SQL> connect test_pwd/test_pwd@adm
Connected.
SQL> ALTER USER test_pwd IDENTIFIED BY test REPLACE test_pwd;
ALTER USER test_pwd IDENTIFIED BY test REPLACE test_pwd
*
ERROR at line 1:
ORA-28003: password verification for the specified password failed
ORA-20009: SORRY, PASSWORD CANNOT BE CHANGED

SQL> password
Changing password for TEST_PWD
ERROR:
ORA-28003: password verification for the specified password failed
ORA-20009: SORRY, PASSWORD CANNOT BE CHANGED

Password unchanged




Disclaimer
EXCEPT WHERE EXPRESSLY PROVIDED OTHERWISE, THE INFORMATION, SOFTWARE,
PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS. ORACLE EXPRESSLY DISCLAIMS
ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE AND NON-INFRINGEMENT. ORACLE MAKES NO WARRANTY THAT: (A) THE RESULTS
THAT MAY BE OBTAINED FROM THE USE OF THE SOFTWARE WILL BE ACCURATE OR
RELIABLE; OR (B) THE INFORMATION, OR OTHER MATERIAL OBTAINED WILL MEET YOUR
EXPECTATIONS. ANY CONTENT, MATERIALS, INFORMATION OR SOFTWARE DOWNLOADED OR
OTHERWISE OBTAINED IS DONE AT YOUR OWN DISCRETION AND RISK. ORACLE SHALL HAVE
NO RESPONSIBILITY FOR ANY DAMAGE TO YOUR COMPUTER SYSTEM OR LOSS OF DATA THAT
RESULTS FROM THE DOWNLOAD OF ANY CONTENT, MATERIALS, INFORMATION OR SOFTWARE.


ORACLE RESERVES THE RIGHT TO MAKE CHANGES OR UPDATES TO THE SOFTWARE AT ANY
TIME WITHOUT NOTICE.


Limitation of Liability
IN NO EVENT SHALL ORACLE BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL OR CONSEQUENTIAL DAMAGES, OR DAMAGES FOR LOSS OF PROFITS, REVENUE,
DATA OR USE, INCURRED BY YOU OR ANY THIRD PARTY, WHETHER IN AN ACTION IN
CONTRACT OR TORT, ARISING FROM YOUR ACCESS TO, OR USE OF, THE SOFTWARE.

SOME JURISDICTIONS DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY.
ACCORDINGLY, SOME OF THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU.