Seting idle_time in a profile

Hello,
I have a profile, test_profile, which I set the idle_time to 2 minutes. I created a test_user and alter the user to the test_profile. After loging in the test_user and let the session sits for 3 minutes, I am still able to perform a query. How come the idle_time of 2 minutes did not log off the test_user? How does idle_time work? Thank you.

Make sure that the resource_limit parameter is set to TRUE. Otherwise, Oracle won't enforce the resource limits specified in profiles.
Justin

Similar Messages

Oracle profile - IDLE_TIME DEFAULT - value ?

Friends
How can I determine the value of DEFAULT for the IDLE_TIME in Oracle profile.
CREATE PROFILE DEFAULT LIMIT
idle_time <value | UNLIMITED | DEFAULT>
Thanks
Vishal V.

Ok, I found it.
"Default" profile has default values.
Thanks
Vishal

Restrict the session's time limit

Friends ,
In my oracle database 10g server the process limit is 400 and session limit is 445 .
Look at the following v$resource_limit output :
RESOURCE_NAME CURRENT_UTILIZATION MAX_UTILIZATION INITIAL_AL LIMIT_VALU
processes |399 |400| 400| 400
sessions |406| 408| 445| 445
Now the problem is , in my database more than 100 users are added last week and for this reason my database process crosses its limit (400) . In this case , when a user tries to login then he gets error :
" SQL> conn user@PROD
Enter password:
ERROR:
ORA-12537: TNS:connection closed"
In this moment , I dont want to increase the process value and want to find out the session who are idle for last 10 minues . Is there any parameter in oracle which helps to find out the idle session ?
Also , I want to disconnect those users who are IDLE for 10 + minutes . How can I restrict this without using any profile and also not incresing the v$process value ?
Waiting for reply .. .

try with default profile
SQL> select resource_name,limit
2    from dba_profiles
3   where profile='DEFAULT' and resource_name='IDLE_TIME'
4 /
RESOURCE_NAME                    LIMIT
IDLE_TIME                        UNLIMITED
SQL> alter profile default limit idle_time 2
2 /
Profile altered.
SQL> select resource_name,limit
2    from dba_profiles
3   where profile='DEFAULT' and resource_name='IDLE_TIME'
4 /
RESOURCE_NAME                    LIMIT
IDLE_TIME                        2Khurram

Having too many idle sessions?

Hi,
We have too many idle sessions at the database end? How can it be controlled apart from using database resource manager? Since some users execute long operations? Please clarify.
Thank you,
Adith

Having 5 of 60 sessions active is entirely reasonable. A session is ACTIVE only if, in that particular instant, the session is actively running a SQL statement. The vast majority of the time, a database connection will be idle as it waits for a user to decide what to do next, for the client application to process the data that was returned, etc.
If you're not encountering any problems, I wouldn't change anything. Setting IDLE_TIME in a profile will kill connections after a period of time, but that may cause problems for users & applications which are not designed to expect that their database connection can be terminated while they were using it.
Justin

Session geting disconnected before IDLE_TIME in profile

Hi !
My database is :
SQL> select * from v$version;
BANNER
Oracle9i Enterprise Edition Release 9.2.0.4.0 - Production
PL/SQL Release 9.2.0.4.0 - Production
CORE 9.2.0.3.0 Production
TNS for Linux: Version 9.2.0.4.0 - Production
NLSRTL Version 9.2.0.4.0 - Production
on os :
SQL> !uname -a
Linux abc-dc 2.4.21-50.ELsmp #1 SMP Tue May 8 17:18:29 EDT 2007 i686 i686 i386 GNU/Linux
I have created a profile Kill_session and set idle_time as 30 minutes(I think the unit for this value is min).
and the profile has been given to the a user genweb. Now when I log in with genweb the session getting disconnected very frequently....not even staying 3 min. inactive.
Its showing :
ORA-02396: exceeded maximum idle time, please connect again
But if I assign default profile to the user genweb in which idle_time is unlimited the session is not getting disconnected.
The ping response is strong. Issue is happening in both the case, if I connect via listener or connect logging in the server.
Also :
sho parameter resource
NAME TYPE VALUE
enqueue_resources integer 1692
resource_limit boolean TRUE
resource_manager_plan string
SQL> select * from dba_profiles where profile='KILL_SESSION';
PROFILE RESOURCE_NAME RESOURCE LIMIT
KILL_SESSION COMPOSITE_LIMIT KERNEL DEFAULT
KILL_SESSION SESSIONS_PER_USER KERNEL DEFAULT
KILL_SESSION CPU_PER_SESSION KERNEL DEFAULT
KILL_SESSION CPU_PER_CALL KERNEL DEFAULT
KILL_SESSION LOGICAL_READS_PER_SESSION KERNEL DEFAULT
KILL_SESSION LOGICAL_READS_PER_CALL KERNEL DEFAULT
KILL_SESSION IDLE_TIME KERNEL 30
KILL_SESSION CONNECT_TIME KERNEL DEFAULT
KILL_SESSION PRIVATE_SGA KERNEL DEFAULT
KILL_SESSION FAILED_LOGIN_ATTEMPTS PASSWORD DEFAULT
KILL_SESSION PASSWORD_LIFE_TIME PASSWORD DEFAULT
KILL_SESSION PASSWORD_REUSE_TIME PASSWORD DEFAULT
KILL_SESSION PASSWORD_REUSE_MAX PASSWORD DEFAULT
KILL_SESSION PASSWORD_VERIFY_FUNCTION PASSWORD DEFAULT
KILL_SESSION PASSWORD_LOCK_TIME PASSWORD DEFAULT
KILL_SESSION PASSWORD_GRACE_TIME PASSWORD DEFAULT
SQL> select profile from dba_users where username ='GENWEB';
PROFILE
KILL_SESSION
I had to change the profile for the user to default.
Sorry for posting all this long output. Pls. help me ....
Am I missing something here?
Edited by: gc on Jan 21, 2011 2:11 AM

SQL> create profile KILL_SESSION2 limit idle_time 30;
Profile created.
SQL> ALTER USER GENWEB PROFILE KILL_SESSION2;
User altered.
But same result.
Connecting through plsql developer from a client pc. also login to server using putty and then sqlplue in both case sessions are disconnected in seconds.
sho parameter resource_limit
NAME TYPE VALUE
resource_limit boolean TRUE

IDLE_TIME profile

Hi
If a select statement or update statement takes a long time to execute, does this counted as idle time?
Thanks

user12023552 wrote:
Hi
If a select statement or update statement takes a long time to execute, does this counted as idle time?
ThanksTime to read
http://download.oracle.com/docs/cd/E11882_01/server.112/e10592/statements_6010.htm#SQLRF01310
Which says,
IDLE_TIME
Specify the permitted periods of continuous inactive time during a session, expressed in minutes. Long-running queries and other operations are not subject to this limit.HTH
Aman....

Network profile and Internet sharing

Hi,
In the network System preference applet there is the possibility to create network profiles for different environement, ex: Home, work, etc.
In sharing preferences includes the Internet sharing as well.
Is it possible to attach a Network profile to an Internet sharing configuration?
What I'm trying to do is to have an Internet sharing profile when I want to share my Airport card in ad-hoc mode (to share with my Newton), but when I'm finished, I do want to switch back to the normal Airport operation so I can use my PB in wireless mode.
So, I need a way to bind the 2 together without having to reconfigure all my network preferences all the time.
Thanks

Hi,
What you suggested, is exactly what I've been trying and is not working.
I think your mistaken:
Location are great to create new network profiles, true. You can't access them from the Airport menu, but from the Apple menu in the submenu location.
The problem is that this does not include the Internet sharing preferences, located into the Sharing preferences pane. So, switching location does not switch Internet sharing preferences. You have to disable and enable them each time.
So, that's not the solution I'm searching for, unless you know some way to bind the 2 seting into a location.
Thanks

Password expire date back to 2011 from 2012 after assigned a user profile

Friends,
I created a profile test as
COMPOSITE_LIMIT UNLIMITED
SESSIONS_PER_USER UNLIMITED
CPU_PER_SESSION UNLIMITED
CPU_PER_CALL UNLIMITED
LOGICAL_READS_PER_SESSION UNLIMITED
LOGICAL_READS_PER_CALL UNLIMITED
IDLE_TIME 60
CONNECT_TIME UNLIMITED
PRIVATE_SGA UNLIMITED
FAILED_LOGIN_ATTEMPTS 5
PASSWORD_LIFE_TIME 120
PASSWORD_REUSE_TIME 60
PASSWORD_REUSE_MAX 30
PASSWORD_VERIFY_FUNCTION NULL
PASSWORD_LOCK_TIME 1
PASSWORD_GRACE_TIME 7;
the user default profile default PASSWORD_LIFE_TIME is 180 and password expired date is 1/7/2012. the test account was created in 7/11/2011.
Now I assign test user to test profile successfully.
However. expire date becomes 11/8/2011 1 from 1/7/2012 by select dba_users
which wrong is in my profile or somewhere?
As I think, the account password expired should be start after assigned new profile with PASSWORD_LIFE_TIME. but is seems expire date is start from original account created date.
Thanks
newdba
Edited by: Oradb on May 24, 2012 1:56 PM

I would think the expire time would be based on the last password change time which Oracle stores in the rdbms base table for user information (user$). Find a second user, alter the password, check the expire date, then assign the user to the new profile, re-check the expiration date. Post back. Behavior may vary between releases so include full Oracle version of test.
HTH -- Mark D Powell --

Incorrect user profile setting after database import

We migrateed the production databsae from Solaris running 10.2.0.3 to OEL running 10.2.0.5. The method we used is exp/imp and it seem everything fine. However, it found that some of the user profile (ie. IDLE TIME, ) limit is not the the same as the old database. It seem the user profile is not migrated successfully.
Exp.par
cat expPRODN_normal.par
full=y
direct=y
buffer=409600000
feedback=100000
compress=y
statistics=none
consistent=n
log=/db/oracle/exp_for_linux/expPRODN_full.log
filesize=2000mb
file=/db/oracle/exp_for_linux/1
imp.par
cat imp_PRD.par
full=y
buffer=409600000
statistics=none
log=/db/oracle/lyn/imp_PRD.log
file=/import/PRODN/1
In old database:
SYS@PRODN1>select resource_name, limit from dba_profiles where profile='DEFAULT' order by resource_name;
RESOURCE_NAME LIMIT
COMPOSITE_LIMIT UNLIMITED
CONNECT_TIME UNLIMITED
CPU_PER_CALL UNLIMITED
CPU_PER_SESSION UNLIMITED
FAILED_LOGIN_ATTEMPTS 5
IDLE_TIME 60
LOGICAL_READS_PER_CALL UNLIMITED
LOGICAL_READS_PER_SESSION UNLIMITED
PASSWORD_GRACE_TIME UNLIMITED
PASSWORD_LIFE_TIME UNLIMITED
PASSWORD_LOCK_TIME UNLIMITED
RESOURCE_NAME LIMIT
PASSWORD_REUSE_MAX UNLIMITED
PASSWORD_REUSE_TIME UNLIMITED
PASSWORD_VERIFY_FUNCTION NULL
PRIVATE_SGA UNLIMITED
SESSIONS_PER_USER 3
16 rows selected.
SYS@PRODN1>
In new database:
sys@SPRD1> select resource_name, limit from dba_profiles where profile='DEFAULT' order by resource_name;
RESOURCE_NAME LIMIT
COMPOSITE_LIMIT UNLIMITED
CONNECT_TIME UNLIMITED
CPU_PER_CALL UNLIMITED
CPU_PER_SESSION UNLIMITED
FAILED_LOGIN_ATTEMPTS 10
IDLE_TIME 60
LOGICAL_READS_PER_CALL UNLIMITED
LOGICAL_READS_PER_SESSION UNLIMITED
PASSWORD_GRACE_TIME UNLIMITED
PASSWORD_LIFE_TIME UNLIMITED
PASSWORD_LOCK_TIME UNLIMITED
RESOURCE_NAME LIMIT
PASSWORD_REUSE_MAX UNLIMITED
PASSWORD_REUSE_TIME UNLIMITED
PASSWORD_VERIFY_FUNCTION NULL
PRIVATE_SGA UNLIMITED
SESSIONS_PER_USER UNLIMITED
16 rows selected.
sys@OIMSPRD1>
You can see limit value of FAILED_LOGIN_ATTEMPTS, IDLE_TIME and SESSIONS_PER_USER are different.

It is not a user profile, but the default one which already exist by default in the database and not overwritten when importing.
By the way, IDLE_TIME is same on both sides.
Nicolas.

How to view/edit/delete the user created profile in oracle 9i? Very Urgent

Friends,
I logged in as system in oracle 9i.
SQL> create profile testpro limit
2 idle_time 1;
Profile created.
SQL> alter user scott profile testpro;
User altered.
Then i logged in to sqlplusw as a scott user.
and i waited for 10 mins after that.
sql> select * from cat;
its working......
how come? i have already set a idle time to 1 minute.
Please correct me if im wrong.
Also, how can i view/edit/delete the user created profile.
Thanks & Regards
Sathyguy
Message was edited by:
sathyguy

The resource limits set for a profile are enforced only when you enable resource limitation for the database.
Enabling and Disabling Resource Limits While the Database is Open
ALTER SYSTEM SET RESOURCE_LIMIT = TRUE;
http://download-west.oracle.com/docs/cd/B10501_01/server.920/a96521/users.htm#15451
Manu

How to create log entry when session exceeded profile's limit ?

Hi all,
is there any way to create entry in log_table (or some log file) when session exceeded its profile's limit (i.e. idle_time) ?
If this entry can be created when session status changes to 'SNIPED', it would be great.
I've tried with trigger "AFTER SERVERERROR" but it doesn't fire on errors like below:
ORA-02396: exceeded maximum idle time, please connect againThank for any help in advance.
Oracle ver: 10.2.0.4 (Windows XP and Linux RH4).
Tomasz K.

Thanks for your reply.
I had audit enabled already,
but there is no real reason logged in audit trail why the session has been disconnected.
ACTION_NAME has only 'LOGOFF' [clear exit] or 'LOGOFF BY CLEANUP' (which includes all "brute" disonnect reasons, as network failure, app failure or "session limit exceeded).
Is there any way to differentiate 'LOGOFF BY CLEANUP' audit entries into more precise descriptions ?
Thanks
Tomasz K.

Profiles: Setting CPU_PER_CALL & LOGICAL_READS_PER_CALL

Hello, I just enabled profiles on 10g, and set some basic limitations (idle_time, connect_time, etc.)
However my main target is to set cpu_per_call & logical_reads_per_call.
Is there a way to monitor queries of a specific user for i.e. a week in order to come up with a max threshold for cpu and IO so I can further set this as a limitation through profiles?
Thank you in advance !

In my opinion CPU_PER_CALL and LOGICAL_READS_PER_CALL would be tough to manage. It may be more appropriate to look into Resource Manager. I think that provides better control over resources.
If you do still want to specify CPU_PER_CALL and LOGICAL_READS_PER_CALL you'll need to gather statistical data on the users. One way to do that would be to setup LOGON / LOGOFF triggers to take snapshots of the session based statistics. Another option may be to look into AWR / STATSPACK or other performance monitoring tools.

Problem testing profile.

Howdy all. Im attempting to use a profile to limit resources as a test. Here is the needed info, followed by my question.
CREATE PROFILE "MYPROFILE" LIMIT CPU_PER_SESSION 1
CPU_PER_CALL 1
CONNECT_TIME 1
IDLE_TIME 1
SESSIONS_PER_USER 1
LOGICAL_READS_PER_SESSION 1
LOGICAL_READS_PER_CALL 1
PRIVATE_SGA 1K
COMPOSITE_LIMIT 1
PASSWORD_LIFE_TIME DEFAULT
PASSWORD_GRACE_TIME DEFAULT
PASSWORD_REUSE_MAX DEFAULT
PASSWORD_REUSE_TIME DEFAULT
PASSWORD_LOCK_TIME DEFAULT
FAILED_LOGIN_ATTEMPTS UNLIMITED
PASSWORD_VERIFY_FUNCTION DEFAULT
CREATE USER "MYUSER" PROFILE "MYPROFILE" IDENTIFIED BY "*******" DEFAULT TABLESPACE "USERS" TEMPORARY TABLESPACE "TEMP" ACCOUNT UNLOCK
GRANT ALTER SESSION TO "MYUSER"
GRANT CREATE CLUSTER TO "MYUSER"
GRANT CREATE DATABASE LINK TO "MYUSER"
GRANT CREATE SEQUENCE TO "MYUSER"
GRANT CREATE SESSION TO "MYUSER"
GRANT CREATE SYNONYM TO "MYUSER"
GRANT CREATE TABLE TO "MYUSER"
GRANT CREATE VIEW TO "MYUSER"
GRANT UNLIMITED TABLESPACE TO "MYUSER"
GRANT SELECT ON "OE"."INVENTORIES" TO "MYUSER"
GRANT SELECT ON "OE"."ORDERS" TO "MYUSER"
GRANT SELECT ON "OE"."ORDER_ITEMS" TO "MYUSER"
GRANT SELECT ON "OE"."PRODUCTS" TO "MYUSER"
GRANT SELECT ON "OE"."PRODUCT_DESCRIPTIONS" TO "MYUSER"
GRANT SELECT ON "OE"."PRODUCT_INFORMATION" TO "MYUSER"
GRANT SELECT ON "OE"."PRODUCT_PRICES" TO "MYUSER"
GRANT SELECT ON "OE"."PROMOTIONS" TO "MYUSER"
GRANT SELECT ON "OE"."SYDNEY_INVENTORY" TO "MYUSER"
GRANT SELECT ON "OE"."TORONTO_INVENTORY" TO "MYUSER"
GRANT SELECT ON "OE"."WAREHOUSES" TO "MYUSER"
GRANT SELECT ON "SH"."CAL_MONTH_SALES_MV" TO "MYUSER"
GRANT SELECT ON "SH"."CHANNELS" TO "MYUSER"
GRANT SELECT ON "SH"."COSTS" TO "MYUSER"
GRANT SELECT ON "SH"."COUNTRIES" TO "MYUSER"
GRANT SELECT ON "SH"."CUSTOMERS" TO "MYUSER"
GRANT SELECT ON "SH"."FWEEK_PSCAT_SALES_MV" TO "MYUSER"
GRANT SELECT ON "SH"."PRODUCTS" TO "MYUSER"
GRANT SELECT ON "SH"."PROMOTIONS" TO "MYUSER"
GRANT SELECT ON "SH"."SALES" TO "MYUSER"
GRANT SELECT ON "SH"."TIMES" TO "MYUSER"
GRANT "CONNECT" TO "MYUSER"
GRANT "MYROLE" TO "MYUSER"
GRANT "RESOURCE" TO "MYUSER"
My thinking is that I should be able to log in to ISQLPlus as myUser, run a query, wait > 1 minute, try to run it again, and it should fail because of the IDLE_TIME paramter of the profile I have created. But that doesn't happen, it simply reruns the query. Any ideas?
TIA, ChrisR

I didn't do the "alter system set resource_limit....." before my testing.
Thanks.

Oracle profile and password limits

Hi there, I don't understand what's limiting my password selection. It appears that the profile is default and doesn't have limitations.
Any help would be appreciated.
Thanks
db2> alter user system identified by "xxxxx";
alter user system identified by "xxxxx"
ERROR at line 1:
ORA-28003: password verification for the specified password failed
ORA-20003: Password should contain at least one \
digit, one character and one punctuation
db2> select profile from dba_users where username='SYSTEM';
PROFILE
DEFAULT
db2> select resource_name, resource_type, limit from dba_profiles where profile='DEFAULT';
RESOURCE_NAME RESOURCE
LIMIT
COMPOSITE_LIMIT KERNEL
UNLIMITED
SESSIONS_PER_USER KERNEL
UNLIMITED
CPU_PER_SESSION KERNEL
UNLIMITED
RESOURCE_NAME RESOURCE
LIMIT
CPU_PER_CALL KERNEL
UNLIMITED
LOGICAL_READS_PER_SESSION KERNEL
UNLIMITED
LOGICAL_READS_PER_CALL KERNEL
UNLIMITED
RESOURCE_NAME RESOURCE
LIMIT
IDLE_TIME KERNEL
UNLIMITED
CONNECT_TIME KERNEL
UNLIMITED
PRIVATE_SGA KERNEL
UNLIMITED
RESOURCE_NAME RESOURCE
LIMIT
FAILED_LOGIN_ATTEMPTS PASSWORD
UNLIMITED
PASSWORD_LIFE_TIME PASSWORD
UNLIMITED
PASSWORD_REUSE_TIME PASSWORD
UNLIMITED
RESOURCE_NAME RESOURCE
LIMIT
PASSWORD_REUSE_MAX PASSWORD
UNLIMITED
PASSWORD_VERIFY_FUNCTION PASSWORD
SFDC_VERIFY_PWD
PASSWORD_LOCK_TIME PASSWORD
UNLIMITED
RESOURCE_NAME RESOURCE
LIMIT
PASSWORD_GRACE_TIME PASSWORD
UNLIMITED
16 rows selected.

I found what the issue was. Does anyone know how to
look at the Resource limits and there value?Other than the DBA_PROFILES view that you queried in the previous post? Or some other resource limits (i.e. Resource Manager limits?)
Justin

Allows more connection then the profile values

I am using the below version.
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
PL/SQL Release 10.2.0.1.0 - Production
CORE 10.2.0.1.0 Production
TNS for Linux: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production
Here is the profile i am using for one of my schema.
CREATE PROFILE auditprofile LIMIT
SESSIONS_PER_USER 2
CPU_PER_SESSION UNLIMITED
CPU_PER_CALL UNLIMITED
CONNECT_TIME UNLIMITED
LOGICAL_READS_PER_SESSION DEFAULT
LOGICAL_READS_PER_CALL UNLIMITED
PRIVATE_SGA UNLIMITED
COMPOSITE_LIMIT UNLIMITED
idle_time unlimited
failed_login_attempts 10
password_life_time unlimited
password_reuse_time unlimited
password_reuse_max unlimited
password_lock_time unlimited
password_grace_time unlimited
still it allows to connect more then 2 session. Any explanation is highly appreciated...

Shrinika wrote:
I am using the below version.
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
PL/SQL Release 10.2.0.1.0 - Production
CORE 10.2.0.1.0 Production
TNS for Linux: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production
Here is the profile i am using for one of my schema.
CREATE PROFILE auditprofile LIMIT
SESSIONS_PER_USER 2
CPU_PER_SESSION UNLIMITED
CPU_PER_CALL UNLIMITED
CONNECT_TIME UNLIMITED
LOGICAL_READS_PER_SESSION DEFAULT
LOGICAL_READS_PER_CALL UNLIMITED
PRIVATE_SGA UNLIMITED
COMPOSITE_LIMIT UNLIMITED
idle_time unlimited
failed_login_attempts 10
password_life_time unlimited
password_reuse_time unlimited
password_reuse_max unlimited
password_lock_time unlimited
password_grace_time unlimited
still it allows to connect more then 2 session. Any explanation is highly appreciated...Did you set the parameter RESOURCE_LIMIT=TRUE at the system level before trying out?
alter system set resource_limit=true;HTH
Aman....

Seting idle_time in a profile

Similar Messages

Maybe you are looking for