Working with Oracle DBA Profile
There are several profiles can be created in a database, depending on the business need of any organization. In simple words the default profile has some extended feature which triggers a red light for auditors and it is vulnerable as well.
Execute the below query to find out the characteristics of any given profile.
select * from dba_profiles where profile='DEFAULT';
It will list up all the resources that are being defined for this profile and its limit.
Likewise you can create your own profile resource type and limit.
Example:
create profile test_profile_unlimited limitSESSIONS_PER_USER UNLIMITEDCPU_PER_SESSION UNLIMITEDCPU_PER_CALL UNLIMITEDCONNECT_TIME UNLIMITEDIDLE_TIME UNLIMITEDLOGICAL_READS_PER_SESSION UNLIMITEDLOGICAL_READS_PER_CALL UNLIMITEDCOMPOSITE_LIMIT UNLIMITEDPRIVATE_SGA UNLIMITEDFAILED_LOGIN_ATTEMPTS UNLIMITEDINACTIVE_ACCOUNT_TIME DEFAULTPASSWORD_LIFE_TIME UNLIMITEDPASSWORD_REUSE_TIME UNLIMITEDPASSWORD_REUSE_MAX UNLIMITEDPASSWORD_LOCK_TIME UNLIMITEDPASSWORD_GRACE_TIME UNLIMITED;
This will create a profile which will be having all the resources set to unlimited. User having this profile has unlimited attempt for password and user can reuse same password unlimited time. Which is not at all recommended for the system. This could only be used if the user is a service user/ ant AI user / any Bot user .
If you have any questions regarding user profile please comment or send direct mail. Are you facing any error while creating user profile or assigning any profile to user. Let me know in comment and I will try to reproduce the issue on my test system and fix it. Thanks for your time!!
No comments:
Post a Comment
If you have any queries/ any suggestion please do comment and let me know.