Purpose
This statement is used to add, modify, or drop password management parameters in a profile.
Note
The changes made by using the ALTER PROFILE statement in a profile affect only the users in subsequent sessions and do not affect the user in the current session.
Syntax
ALTER PROFILE "profile_name"
LIMIT
{
FAILED_LOGIN_ATTEMPTS integer | UNLIMITED | DEFAULT
| PASSWORD_LIFE_TIME integer | UNLIMITED | DEFAULT
| PASSWORD_LOCK_TIME integer | UNLIMITED | DEFAULT
| PASSWORD_VERIFY_FUNCTION function_name | NULL | DEFAULT
| PASSWORD_GRACE_TIME integer | UNLIMITED | DEFAULT
};
Parameters
| Parameter | Description |
|---|---|
| profile_name | The name of the profile to be modified. |
| FAILED_LOGIN_ATTEMPTS | The number of consecutive failed login attempts allowed for a user in the profile. |
| PASSWORD_LOCK_TIME | The number of days that a locked account specified in the profile remains locked after it has been locked. |
| PASSWORD_LIFE_TIME | The number of days that a password specified in the profile remains valid. |
| PASSWORD_GRACE_TIME | The number of days during which a user in the profile is allowed to log in after a password warning is issued. |
| PASSWORD_VERIFY_FUNCTION | The name of the function that verifies a password. |
| integer | The specified parameter is set to an integer value. |
| UNLIMITED | No restriction is set on the specified parameter. |
| DEFAULT | The default value is used for the specified parameter. |
| function_name | The name of the function that verifies a password. |
| NULL | No verification function is used. |
Examples
Set the
FAILED_LOGIN_ATTEMPTSparameter to5and thePASSWORD_LOCK_TIMEparameter to1for theprofile1profile.obclient> ALTER PROFILE "profile1" LIMIT FAILED_LOGIN_ATTEMPTS 5 PASSWORD_LOCK_TIME 1;Set the
PASSWORD_LIFE_TIMEparameter to90and thePASSWORD_GRACE_TIMEparameter to5for theprofile2profile.obclient> ALTER PROFILE "profile2" LIMIT PASSWORD_LIFE_TIME 90 PASSWORD_GRACE_TIME 5;