Oracle user account is getting locked frequently

Hi everyone!!!
I am using Oracle 11g on Linux . I have user named "XXX" to whom I have assigned a DEFAULT profile. The Password parameters in DEFAULT profile are as follow.
Resource Name                                      Resource                                 Limit
FAILED_LOGIN_ATTEMPTS                    PASSWORD                            20
PASSWORD_LIFE_TIME                        PASSWORD                            UNLIMITED
PASSWORD_LOCK_TIME                      PASSWORD                           UNLIMITED
PASSWORD_REUSE_TIME                   PASSWORD                            UNLIMITED
PASSWORD_REUSE_MAX                   PASSWORD                             UNLIMITED
I don't know why my user is getting locked continuously. Even i haven't reached Failed_login_attempts (20). Each time I require to unlock user account as SYS user and then I can connect as XXX user.
And another thing that I want to know is when user account's status is set to LOCKED, EXPIRED, EXPIRED & LOCKED and LOCKED(TIME).
Thanks & Regards
Tushar Lapani

Hi,
can you tell me the exact db version?
As explained in MOS notes:
DBA_USERS.ACCOUNT_STATUS shows LOCKED after FAILED_LOGIN_ATTEMPTS Is Breached (Doc ID 284344.1)
How to Interpret the ACCOUNT_STATUS Column in DBA_USERS (Doc ID 260111.1)
Expected behaviour is:
1. Oracle release is <= 11.1.0.7.
DBA_USERS.ACCOUNT_STATUS = LOCKED(TIMED) whenever the number of failed login attempts is > FAILED_LOGIN_ATTEMPTS
2. Oracle release is >= 11.2 and PASSWORD_LOCK_TIME = unlimited:
DBA_USERS.ACCOUNT_STATUS = LOCKED whenever the number of failed login attempts is > FAILED_LOGIN_ATTEMPTS
3. Oracle release is >= 11.2 and PASSWORD_LOCK_TIME = <some fix value>
DBA_USERS.ACCOUNT_STATUS = LOCKED(TIMED) whenever the number of failed login attempts is > FAILED_LOGIN_ATTEMPTS
Note
that 10.2.0.5 displays the same behavior as 11.2, because the fix that changed the behavior in 11.2 was introduced in 10.2.0.5.
So I suggest you to follow MOS note
Finding the source of failed login attempts. (Doc ID 352389.1)
to find who locked the account.
Ombretta

Similar Messages

J2EE_ADMIN user getting locked frequently

Hi SAP Guru's,
The user J2EE_ADMIN in our nw2004s system is getting locked frequently. We have changed the password of this user in ABAP via SU01 & in JAVA in the secure store via configtool. The server was re-booted after doing these changes. Still the user J2EE_ADMIN is getting locked frequently. Also in SM21, we have a log <b>"J2EE_ADMIN locked due to incorrect logon"</b> for this locking which mentions the user as SAPJSF (Communication user between ABAP & JAVA).
Is there a possibility that SAPJSF is locking the user J2EE_ADMIN ?? how & why ??
Any help on this will be highly appreciated.
Thanks,
Sanjeev.

have you solve this issue? we have the same!
every half hour (xx:51:00 and xx:29:00), the J2EE_ADMIN user is locked by user SAPJSF transaction KRNL from the local host (terminal).
We have changed the pass in secure store in configtool to the pass we used in abap.
In "Visual Administrator" "Cluster>Server>Services-->Security Provider" the user have a checked box at "No password change required"
We searched for other places with a wrong pass (Jco Connections = no J2EE_ADMIN used, SLD = no J2EE_ADMIN used), but found nothing.
need help pls.
regards
chris

ORA-20160: Encountered an error while getting the ORACLE user account.

when users trying to apply for the leave . Once they apply for the leave and the respective manager approves it.
They get an notification mail with the error message The changes were not applied because ORA-20160: Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator. ORA-06512: at "APPS.ALR_PER_ABSENCE__800_53447_IAR", line 3 ORA-04088: error during execution of trigger 'APPS.ALR_PER_ABSENCE__800_53447_IAR'
EBS : 12.1.2
Database : 11.2.0

We are also facing the same issue , with the following error.
The Changes were not applied because ORA-20160: Encountered an error while getting the ORACLE user account for your concurrent request, Contact your system administrator. ORA-06512: at “ APPS.ALR_PAY_ELEMENT_801_53338_IAR”, line 1 ORA-04088: error during execution of the trigger ‘APPS.ALR_PAY_ELEMENT_801_53338_IAR’
Dear Hussein ,
As per your suggestion , if we disable the trigger , does it workflow goes ahead without any problems ?
By Disabling the trigger , what would be the impact ? I mean does we are going to loose the data that was supposed to be updated the trigger.
And basically please educate me . what is the use of this APPS.ALR_PAY_ELEMENT_801_53338_IAR’ ?
Regards
Raghu

Error while getting the ORACLE user account for your concurrent request

Hi ,
When I am submitting the Concurrent Program from OAF page Iam getting
Error
Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator.
When we will face this error.
Not able to submit the Request
Krishna

Krishna
Try like this
public int submitCPRequest(String shipmentId) {
System.out.println("into submitCPRequest");
try {
OAApplicationModule am = pageContext.getApplicationModule(webBean) ;
OADBTransaction transaction = am.getOADBTransaction();
Connection conn = transaction.getJdbcConnection();
ConcurrentRequest cr = new ConcurrentRequest(conn);
cr.setDeferred();
String applnName = new String("XXAPL"); //Application that contains the concurrent program
System.out.println("ApplName"+ applnName);
String cpName = new String("SHIP_REQ"); //Concurrent program name
System.out.println("Concc Name"+ cpName);
// String cpDesc = new String("Shipping Request"); // concurrent Program description
// Pass the Arguments using vector
// Here i have added my parameter headerId to the vector and passed the
//vector to the concurrent program
Vector cpArgs = new Vector();
cpArgs.addElement(shipmentId);
System.out.println("Args"+ cpArgs);
After this it is going into exception
// Calling the Concurrent Program
int requestId = cr.submitRequest(applnName, cpName, null, null, false, cpArgs);
System.out.println("Req Id"+ requestId);
tx.commit();
return requestId;
catch (SetDeferredException e)
throw new OAException("SetDeferredException " + e.getMessage(),OAException.ERROR);
catch (RequestSubmissionException e) {
System.out.println("Into Exception");
OAException oe = new OAException(e.getMessage());
oe.setApplicationModule(this);
throw oe;
}Thanks
AJ

User in CTSDEPLOY RFC getting locked frequently

Hello All,
We have been observing that the user in RFC destination CTSDEPLOY getting locked frequently whenever we transport a rerquest from development to quality in our PI system. The transport would go fine, if we unlock that user. The user we are maintaining in CTSDEPLOY is J2EE_ADMIN. When we test the RFC in our quality system, it works fine. But only when we transport to quality, it is getting locked.
Please help us resolving this. We dont have RFC destination with name CTSDEPLOY in our PI development system. Do we need to have RFC destination there too.
Awaiting your inputs.
Regards,
Ram.

Hi,
>>>We dont have RFC destination with name CTSDEPLOY in our PI development system. Do we need to have RFC destination there too.
no need for that in DEV
does your RFC Destination for Java to ABAP Connectivity work in DEV ?
destination -> sap.com/com.sap.tc.di.CTSserver under
Configuration Management - Infrastructure - Destinations.
Regards,
Michal Krawczyk

Problem calling web service: Error while getting the ORACLE user account

Hi All!
I was able to call the service EGO_ITEM_PUB-PROCESS_ITEM, but after implemented some patches, suddenly I get this error as result:
- <env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
- <env:Body>
- <OutputParameters xmlns="http://xmlns.oracle.com/apps/ego/soaprovider/plsql/ego_item_pub/process_item__1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<X_INVENTORY_ITEM_ID xsi:nil="true" />
<X_ORGANIZATION_ID xsi:nil="true" />
<X_RETURN_STATUS>U</X_RETURN_STATUS>
<X_MSG_COUNT>1</X_MSG_COUNT>
<X_MSG_DATA>Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator.</X_MSG_DATA>
</OutputParameters>
</env:Body>
</env:Envelope>
Any ideas?
Thanks,
Konrad

hsawwan wrote:
Hi,
I was able to call the service EGO_ITEM_PUB-PROCESS_ITEM, but after implemented some patches, What are those patches?
# Patch 8407693:R12.TXK.B ISG: Service Generation Failure - Java Compiler Could Not be Found
# Patch 8459663:R12.OWF.B : Mandatory Consolidated One-Off Fixes for ISG on Top of 12.1.1
# Patch 8916358:R12.OWF.B : Service Timeout When Invoking Services Deployed to Integrated SOA Gateway
# Patch 9349321:R12.OWF.B : Issue with item Bulk Load in Oracle Product Hub PIP 2.4
# Patch 9446625:R12.FND.B : 1OFF:8995921:12.1.1:12.1.1:PERF : LoginModules Performance Issue
# Patch 9070077:R12.OWF.B : 1OFF:9045280:12.1.1:12.1.1:Invoking a Web Service Requires NLS Lang When It Should be Optional
# Patch 9153106:R12.OWF.B : IREP_Parser.PL Exits with GETPWUID Function IS Unimplemented in PARSER.PM -> Wichtig für ISG (für custom pl/sqls im ISG)
# Patch 9004712:R12.OWF.B : One-Off for IREP PARSER on Top of Oracle E-Business Suite Release 12.1.1 -> Wichtig für ISG (für custom pl/sqls im ISG)
IAS:
# Patch 8607523 for the AS version 10.1.3.4
Oracle Support told me that I need this patches because of some other problem (generating wsdl and deploy for BOM_BO_PUB package does not work in my environment) and since that, the process_item call stopped working!
btw: The EGO_ITEM_PUB-PROCESS_ITEM call for an existing item still works (I can modify the description), but creating a new item does not work anymore. Here are the parameters I send to the web service:
Header:
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken>
<wsse:Username>sysadmin</wsse:Username>
<wsse:Password
Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">sysadmin</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
<q0:SOAHeader/>
Body:
<q1:InputParameters>
<q1:P_API_VERSION>1.0</q1:P_API_VERSION>
<q1:P_INIT_MSG_LIST>T</q1:P_INIT_MSG_LIST>
<q1:P_COMMIT>T</q1:P_COMMIT>
<q1:P_TRANSACTION_TYPE>CREATE</q1:P_TRANSACTION_TYPE>
<q1:P_ITEM_NUMBER>KHR_WS_05</q1:P_ITEM_NUMBER>
<q1:P_DESCRIPTION>desc2</q1:P_DESCRIPTION>
</q1:InputParameters>
Thanks,
Konrad

Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator

Dear Techies,
We have registered an Extra Information Type as self service OAF page and did some validations using user hook which are working fine. But for some requests EIT creation page is throwing below errors.
1. Encountered an error while getting the ORACLE user account for your concurrent request. Contact your system administrator.
2. An unexpected situation occurred while executing routine FND_DATA_SECURITY.GET_SECURITY_PREDICATE_HELPER.The cause was: The parameter 'p_object_name' cannot be 'GLOBAL'.
System throws these errors whenever user hook suppose to throw our customized validation messages.Since we are at UAT instance, we are bouncing apache and oacore to get rid of these errors every time they appear. But we cannot bounce once it is moved to production.
Kindly share some ideas to fix these errors as we are very close to Go-Live and we are facing this issue with all EIT's and SIT's.
Thanks and Regards
Dileep Kumar.

Hi Mahesh,
Thanks for reply.
I have gone through the link that you have suggested. But our EIT user hook validations doesn't have any code related to submission of concurrent programs. More over our error is not stable. If we bounce the apache and oacore, the system will work fine without unexpected errors for some time. We are not even able to replicate these errors.
Thanks and Regards
Dileep Kumar.

MII UserID gets locked frequently

Hi
I have created a MII user through which PI post messages to MII MesageListener. This user is getting locked frequently so PI fails to post the messages. Can anyone tell me why the userID gets locked frequently? I am using MII version 12.1.6
Thanks in advance
Shaji

In cases that I have seen, it is usually some job folks forgot about that did not get the password updated when it changed. A scheduled job is frequently the problem, but not always as I have seen message listener jobs which were causing the problems or even webpage invoked transactions.
Good luck,
Mike

Create Oracle USER Account from Third Party System

Hi there
We have requirment to create Oracle USER Account through third party system.
How can we achive this?
I know ORacle Provide FND_USER_PKG.CREATEUSER API to create user
Is there any special thing we have to do to create Oracle USER from another system?
Thanks
ASIM

Hi,
Is there any special thing we have to do to create Oracle USER from another system?I believe you need to check the third party manual or contact the vendor for other considerations when creating user accounts from this system.
For FND_USER_PKG, please see the links referenced in this thread.
change password of EBS user
Re: change password of EBS user
Regards,
Hussein

HT3910 Once I register my MBP and create a user account, I get a gray screen and it does nothing.

Once I register my MBP and create a user account, I get a gray screen and it does nothing.

Reinstall OS X without erasing the drive
Do the following:
1. Repair the Hard Drive and Permissions
Boot from your Snow Leopard Installer disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Utilities menu. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the installer.
If DU reports errors it cannot fix, then you will need Disk Warrior and/or Tech Tool Pro to repair the drive. If you don't have either of them or if neither of them can fix the drive, then you will need to reformat the drive and reinstall OS X.
2. Reinstall Snow Leopard
If the drive is OK then quit DU and return to the installer. Proceed with reinstalling OS X. Note that the Snow Leopard installer will not erase your drive or disturb your files. After installing a fresh copy of OS X the installer will move your Home folder, third-party applications, support items, and network preferences into the newly installed system.
Download and install the Combo Updater for the version you prefer from support.apple.com/downloads/.

User Account getting locked frequently...

An User account which the developers are using is getting locked very frequently when they run some applications. They say they are giving the right password and username within the application. What should one be looking for? I am fed up by unlocking the account using ALTER USER username ACCOUNT UNLOCK;

I have also faced such kind of problems. Most of the developers forget how the application connects. they might have hard coded it or some time using a wrong parameter files.
Need to check who are all the users and how they are connecting and how the application is connecting to the database.
If there are more users then enable audit. Auditing will be the only solution.

The user id "sa" is getting locked frequently in SQL server 2008 R2

Hi Team,
We have SQL server 2008 R2 machine and recently i'm getting issue with the user id "sa" as its getting locked out. I;m not sure with the reason caused with this. I need to login to the SQLserver with windows authentication and manually unlock
the "sa" account and its happening frequently.
Let me know how to fix this?
Regards,
Guru

Might be the SA account either using by any application team or any job have been configured to use it, since you are saying that its getting locked out then it someone or application or apps jobs performing with Mulitple incorrect login attempts with incorrect
password try(since if check_expiration enabled it it can lockout based on the windows password policy, so you can check in the SQL errorlog when was the last login succeeded and from when the incorrect attempts tried & finally it gets locked out(so here
you will have from which host it was trying)).
So talk to the application team, did anyone recently changed the SA password or some one misusing or configured to any applications .
If nothing works then perform the SQL server side trace to track it or trigger can help
Thanks, Rama Udaya.K (http://rama38udaya.wordpress.com) ---------------------------------------- Please remember to mark the replies as answers if they help and UN-mark them if they provide no help,Vote if they gives you information.

Locked the oracle User account

How to know who(os Name/ User/ Locked Time) locked the oracle User account

1) You didn't mention an Oracle version. If you're on 10.2, perhaps this discussion
http://www.pythian.com/blogs/284/oracle-102-migrations-%E2%80%93-account-lockedtimed-and-failed_login_attempts
would be interesting.
2) DBA_USERS isn't going to tell you who caused the account to be locked. Just that it is locked and when it was locked.
Justin

Account APPLSYS gets locked automatically

hi ,
i recently upgraded my test instance to oracle 10g (10.2.0.4) from9.2.0.5 , my EBS version is 11.5.10 , OS is HP UX 11.11
whenver i give wrong password for applsys in adadmin , APPLSYS gets locked , how do i increase number of attempts for failed logins??

Please follow the steps in the following note, and see if it helps in resolving the issue.
Note: 420001.1 - adpatch Ora-28000 Account Locked apps
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=420001.1
If the above note does not help, review the following note:
Note: 352389.1 - Finding the source of failed login attempts
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=352389.1

Trigger on user account expire or lock?

How to catch an event when some user account locks or expires soon?
is there such trigger? (Oracle DB 11g R2)
regards

I would like to have mail notification when a user account locks--This will give you the count of how many user locked
set head off
spool count_locked.log
select count(*) from dba_users where ACCOUNT_STATUS like '%LOCKED%';
logg off
set head on
--Using unix commands, check if this log file has a value or it "no rows selected"
--if there is a count , run a another sql which dispalys username and status and send thsi sql output to your mail id using mailx or sendmail
By the way , there are many types of "LOCKED" status, which one you are looking for ??
_"Locked" types_
LOCKED
EXPIRED(GRACE) & LOCKED(TIMED)
EXPIRED(GRACE) & LOCKED
EXPIRED & LOCKED
LOCKED(TIMED)
EXPIRED & LOCKED(TIMED)

Oracle user account is getting locked frequently

Similar Messages

Maybe you are looking for