Purpose
You can use this statement to add, modify, or drop password management parameters in a profile.
Note
The changes made by using the ALTER PROFILE statement in a profile affect only the users in subsequent sessions and do not affect the user in the current session.
Syntax
ALTER PROFILE "profile_name"
LIMIT
{ FAILED_LOGIN_ATTEMPTS
| PASSWORD_LIFE_TIME
| PASSWORD_LOCK_TIME
| PASSWORD_GRACE_TIME
}
{ integer | UNLIMITED | DEFAULT };
Parameters
| Parameter | Description |
|---|---|
| profile_name | The name of the profile to be modified. |
| FAILED_LOGIN_ATTEMPTS | The number of consecutive failed logon attempts of a user account. |
| PASSWORD_LOCK_TIME | The locking period (days) of the account after the specified number of failed logon attempts is reached. |
| PASSWORD_LIFE_TIME | The validity period, in days, of the password. |
| PASSWORD_GRACE_TIME | The grace period, in days. In this period, the alert is cleared and account logon is allowed. |
| integer | Indicates that the value of the parameter must be an integer. |
| UNLIMITED | Indicates that no limitation is posed on the format of the parameter value. |
| DEFAULT | Indicates applying the default limitation on the parameter. |
Examples
Modify the number of failed logon attempts and the password locking period. Specifically, set
FAILED_LOGIN_ATTEMPTSto5andPASSWORD_LOCK_TIMEto1in the profile namedprofile1.obclient> ALTER PROFILE "profile1" LIMIT FAILED_LOGIN_ATTEMPTS 5 PASSWORD_LOCK_TIME 1; Query OK, 0 rows affectedModify the validity period and grace period of the password. Specifically, set
PASSWORD_LIFE_TIMEto90andPASSWORD_GRACE_TIMEto5in the profile namedprofile2.obclient> ALTER PROFILE "profile2" LIMIT PASSWORD_LIFE_TIME 90 PASSWORD_GRACE_TIME 5; Query OK, 0 rows affected