Oracle Auditing: capturing changed password terminal id

ORACLE 10.2.0.4
I wrote the following code to display email notifications for any user account that had an invalid login attempt.
select USERNAME, timestamp, terminal from dba_audit_session where returncode = 1017 and
timestamp > sysdate - 62/(24*60) and
username in (select username from dba_users where profile = 'DEFAULT') order by timestamp;
Does anyone know what the returncode would be if a password has been changed?

user10784896 wrote:
Ok - so where can I get that information? Is there another auditing table I need to query from?Yes you need to query sys.aud$ table to get that information if auditing on alter user is enabled.
Regards
Anurag

Similar Messages

Can we pass values to Oracle Default window when Password expired?

We are using our own login form to login to our Oracle Form based application. All the passwords are encrypted as per our system design and hence password changed outside ( through SQLPLUS, TOAD ..etc) our application will block the user to be login to our system.
Now we are implementing the passowrd expiration logic through "PROFILES".
When the user's password is expired then if user is trying to loginb, oracle Form displays its default screen with the below three fields to change the password
1.Old passowrd
2.New password
3.Re enter password
Since we have implemented our own encryption method, we should not allow the user to enter new password in oracle's default window.
Instead we have to use the new password entered in our application, it will be encrypted and passed it directly to the oracle's default window and User should be able click ONLY the "OK" button other fields should be disabled.
In this way we will be able to change the old password with new encrypted one.
is it possible? is there any alternative to this?

Hi,
My requirement is exactly the same as yours, can you please let me know what did you do to overcome the Oracle Forms Default change password screen.
Regards,
Praveen

User change password after first logging in Oracle 11g

Hi
Can you help someone in connection with this problem:
user can not change password after first logging in Oracle 11g
All the best
Ragip Avdijaj

Sounds like they are not getting logged in at all, so they are never getting to the point where they can change the password, but we need to see more detail to give a better answer (an example or copy-paste of a sqlplus session might help)

AUDIT action (create, delete, privilege escalation, set and change password from users account and group) users and admins in Solaris 10

Hello.
in Solaris 10 i need auditing process create, delete, privilege escalation, set and change password and etc... from users account and group.
I set settings:
in file syslog.conf:
*.info;mail.none;cron.none;audit.notice            @IP-Remote-syslog-server-SIEM
in file   /etc/security/audit_control:
dir:/var/audit
flags:lo,ad,ex,cc,am,no,fc,fd
minfree:20
naflags:lo
plugin:name=audit_syslog.so;p_flags=lo,ad,ex,cc,am,no
in file   /etc/security/audit_user:
root:lo,ad:no
Now I see in the logs only the fact of a connection via SSH and run processes on behalf of users. Creation. delete users, change passwords for some reason do not is logged.
Many users. For each individual write permissions in the file /etc/security/audit_user not possible, it is likely to forget any new user (or there is a possibility in this file one line to describe the audits for all accounts?)
Where is the mistake?

You are most likely hitting Bug 15779000 user/role/groupadd/mod/del don't audit their use.
And the fix is only available in S11.2.
-- Renaud

Changing passwords of oracle users

Dear all
I wander is there any problem if changing password of oracle users SAPOWNER, system,sys . (I guess command for that is brconnect -u system/<password> -f chpass -o <sapowner> -p <password>
). What about sys and system. (I hope that after changing passwords the system will be functional)
Which user is used when "sqlplus / as sysdba"
thank you in advance

Hello Jan,
I wander is there any problem if changing password of oracle users SAPOWNER, system,sys
Well we already discussed the SAPOWNER here: http://forums.sdn.sap.com/message.jspa?messageID=10814500#10814500
If you change the password of SYSTEM or SYS there will be no problem at all. These users/password combination is not used in a SAP environment unless you explicitly specify the SYSTEM user and password in some BR*Tools calls like brconnect. If you just use the "/" default approach, the OS authentication mechanism (OSDBA) is used - so no issue there at all.
@Orkun:
This is not a user, but a role. So when you connect to the database by using "/as sysdba" you will be able to connect to the system by sysdba role not by a user.
If you use this apporach you are connected with the user SYS - so you are using a user for sure (and btw. you can only logon with SYS by using SYSDBA role). The only difference between "sqlplus / as sysdba" and "sqlplus SYS as sysdba" is, that you are using the specified OSDBA group with the first approach (so no password is required).
shell> pwd
/oracle/<SID>/11202/rdbms/lib
shell> grep dba config.s
# SS_DBA_GRP defines the UNIX group ID for sqldba adminstrative access.
        .rename H.16.ss_dba_grp{TC},"ss_dba_grp"
        .globl ss_dba_grp{RW}
T.16.ss_dba_grp:
        .tc     H.16.ss_dba_grp{TC},ss_dba_grp{RW}
        .csect ss_dba_grp{RW}, 3
# End   csect   ss_dba_grp{RW}
        .string "dba"
shell> sqlplus / as sysdba
SQL> SELECT sys_context('USERENV', 'SESSION_USER') FROM DUAL;
SYS_CONTEXT('USERENV','SESSION_USER')
SYS
shell> sqlplus SYS as SYSDBA
Enter password:
SQL> SELECT sys_context('USERENV', 'SESSION_USER') FROM DUAL;
SYS_CONTEXT('USERENV','SESSION_USER')
SYS
Regards
Stefan

Oracle Standard user ID Password change..

Hi Team,
Would like to know whether changing the Oracle Standard users password will have any impact..
eg: user:System , pwd :Manager..
Will changing standard user password have any impact..
If there is n impact could you pls let me know the procedure to change the password..
We are woking on SAP 4.6c, Oracle 9i, HP -unix.
Regds,
Satyanarayana N.

Hi,
Could you please let me the know the procedure to change the password using brconnect so that the changes password gets updated in the SAPUSER Table as well as Oracle dictionary..
brconnect -f chpass -o sapr3 -p newpassword.
I would like to know the complete procedure to change the password using brconnect.
Iam currently using SAPDBA
Regds,
Satyanarayana N.

Capture Changes from Sql Server using Oracle Streams - Destination Oracle

Is it possible to capture changes made to tables in Sql Server database and propagate the changes to Oracle Database using Oracle Streams and Heterogeneous Gateway. I see plenty of information about pushing data from Oracle to Sql server, but I haven't been able to find much information about going the other way. Currently we are using sql server 2005 replication to accomplish this. We are looking into the possibility of replacing it with streams.

the brief understanding i have is that there is nothing out of the tin that Oracle provides to stream between SQL Server and Oracle. The senario is documented in Oracle docs however and says you need to implement the SQL Server side to grabe changes and submit to Oracle stream queues.
i'm sure i've seen third parties who sell software to do this.
If you know otherwise please let me know. Also wasn;t aware one could push from SQL Server to Oracle. Is this something only avail in SQL Server 2005 or does 200 also have it? How are you doing this?
Cheers

Error when changing password of NW J2ee's secure store and Oracle sqlplus

Hi all,
I am wondering on the following:
Current setting:
I have "old_password" for J2ee configtool's secure store.
I have "old_password" for Oracle's sapsr2 user inside Sqlplus.
When I change the password for all 3 place from "old_password" to "new_password", I am not able to connect to configtool. I am also not able to start the Portal service; with logfile error "invalid user/password"
If I change the password back to "old_password", I can connect to configtool as well as start the service.
Snote and forumers (google) mention that update configtool's secure store and "alter user sapsr3" for Oracle database is all I need to change password.
Have I miss out some step in order to change the password for my Enterprise Portal?
Thank you.
Regards

edit: never mind, found the meaning of SDM.
but the command below, is it usable?
For Windows OS:
Open a command prompt and navigate to the folder <Drive>:\usr\sap\DP1\JC21\SDM\program
Execute the below commands:
sdm jstartup "mode=standalone"
sdm changepassword "newpassword=<Enterthenewpassword>"
sdm jstartup "mode=integrated"
StartServer.bat
Edited by: Sek Yao Ooi on Dec 7, 2009 9:21 AM

Unable to change password from application when Oracle password has expired

I need to know how to change the users
(Oracle 9.0.8) password via Visual Basic (v6.0
SP3) and RDO. If the users password is expired,
the proper error message is returned, but because
the user isn't connected to the database, I
cannot change the password with the "ALTER xxx
IDENTIFIED BY xxx" sql. Anyone got any
suggestions??

you have to unlock it with some other user with the alter user privilege (e.g. sys or system), or (if you use OID) some user with DAS privileges.

Capture data from Change Password form

Hi All,
I am trying to capture an error in the "Change Password Form". This error gets generated because of a custom java API call I make in the form. I want to show the error on the "Change Password Results" page. I tried to set the error message as a request attribute, but it seems the attribute is lost somewhere during the transit to changePasswordResults.jsp. I even tried to get the request attribute from "Change Password Workflow", but that didn't work either.
Could anyone suggest me if we can set a variable/attribute/parameter from the "Change Password Form" so that I can use it in a later form/workflow/JSP?
Thanks
Edited by: bibs22 on Jun 12, 2008 5:46 PM

It's not very well documented but have a look at http://docs.sun.com/app/docs/doc/820-5821/bvbih?l=en&a=view&q=baseContext in the section at the very bottom titled "Using the variables Attribute".
You can define a baseContext in your form that will allow you to get access to the workflow variables.
For example:
<Form name="My Form" baseContext='variables'>
<Field name=":variables.myworkflowvariable">
</Field>
</Form>

Windows 2008 Terminal Server "user must change password at next logon" problem with Windows 7 client.

Hi,
I have a fully patched Windows 2008 SP2 Terminal Server and a fully patched Windows 7 client.
I have logged into the Windows 2008 SP2 Terminal Server server with a test account via RDC before.
When I try to log in via RDC to the 2008 TS with a test account which has been marked with the setting "User must change password at next logon" I get the RDC message "You must change your password before logging on the first time. For assistance, contact your system administrator or technical support." I need to force the user to change their password once it has been issued, any ideas on how this can be done?
Thanks,
Dan

This does not resolve my issue all the way. I'm having the same problem; When i'm "deploying" users, i always want the users to set their own passwords. Ok, so I then set the auth mode to "RDP Security layer". It seemed to work fine, and it does for that
special purpose.
Just like Daniel, my clients are connecting to our terminal server from several/different "customer-domains" So, they can't logon locally(on their local computer) and change their password, it has to be done THROUGH the terminal server.
But if I turn on RDP Security Layer, users can't use remoteapp through tsgw they only get: "Your Remote Desktop Connection Failed because the remote computer cannot be authenticated" Any ideas?
Also, our terminal servers is round robin based in a farm. So users connect to: tsfarm.domain.com(yes, public a-record which resolves to two internal adresses) This is because, we're using a wilcard *.domain.com as SSL certificate.
But, when i'm using this, our clients sometimes get double auth when they login. I only get the double auth when tsfarm.domain.com resolves to server A, but the session broker wants the user to be on server B.(load balancing)
This does not occur when SSL is enforced, any ideas?

Customizing Oracle Web Access Client password change

We need to turn off the built in Password Change feature in the Oracle Web Access Client of Collaboration Suite or, an even better option, redirect it to our custom built change password application. It appears in the client under Preferences in the same pop-up window as General and Time Zone. We've been poking around in the file structure and trying to find what renders this page. Can anyone offer any help?
Thanks.
Troy

Hello,
You can't do that in WAC but in the Webmail interface > Preferences > Account > Folders you can set this for Oracle Mail.
Hope it helps.
Irina

Change the 'Oracle' and 'Applmgr' account password on OS

Hi Gurus,
How would I change the 'Oracle' and 'Applmgr' account password on OS Level?
Apps11i
DB: 10g
OS: HP-UX
Thanks,

Afia wrote:
Hi Gurus,
How would I change the 'Oracle' and 'Applmgr' account password on OS Level?
Apps11i
DB: 10g
OS: HP-UX
Thanks,
Let me google that for you
Thanks,
Hussein

How do i change password in Oracle Discoverer Administrator??

My Password has expired, how do i change password in Oracle Discoverer Administrator??
Thanks in advance ??
Regards
Raja Hyderali

Thanks Michael.
Metalink (Note:290279.1) suggest the option of changing password, after you logon. I could not find any way of changing the password when it is expired.
Thanks all for your suggestions.
Regards,
Raja Hyderali

Changing password of Sysman and DBSNMP users in Oracle 10g (10.2.0.3.0)

Hi,
When i changed my sysman and dbsnmp password, these users are frequently locking.
For sysman password change i do the following steps.
1) emctl stop dbconsole
2) change password of sysman and dbsnmp from sql
3) Post sysman password change to emoms.properties file
4) Post DBSNMP password change in targets.xml
5) emctl start dbconsole.
DBSNMO AND SYSMAN users were locked.
Stop dbconsole again
Unlock the user sysman and dbsnmp
then again restart dbconsole
Sysman user locked
Another thing do we need to have same password for dbsnmp and sysman
Regards,
irfanb146

Now Sysman and DBSNMP users are unlocked after i made the password of sysman change again and they are not locking.
Following is the message in the browser
Enterprise Manager is not able to connect to the database instance. The state of the components are listed below.
Browser is showing All the components are up like instance, Agent and Listener with green arrows upward
Message was edited by:
user605066

Oracle Auditing: capturing changed password terminal id

Similar Messages

Maybe you are looking for