Managing Passswordd Security and Resources

          1 Profiles
          ? 1)a profile is a named set of password and resource limits
          ? 2)Profiles are assigned to user by the create user or alter user command
          ? 3)can be enable or disable
          ? 4)can relate to the default profile.
          2 Password Management
          ? Password history,account locking,password expiration and aging ,password verificcation.
          3Enabling Password Management
          ? 1)set up passwordd management by using profiles and assign them to users
          ? 2)lock unlock and expire accounts usign the create user or alter user
          ? 3)alwarys enforcing
          ?? e.g
          ?? create user test identified by test;
          ?? alter user test account lock;
          ?? alter user test account unlock;
          ?? alteer user test password expire;
          4 Passowrd Account locking
          ? FAIKED_LOGIN_ATTEMPS: number of failed login attemts before lockout of the account
          ? PASSWORD_LOCK_TIME : number of days the account is locked after the specified number of??????????????????????? failed login attemps
          ? e.g
          ? create profile profile1 limit
          ? password_lock_time 1/1440? -- one muinuts
          ? failed_login_attempts 3;
          ?
          ? alter user test
          ? profile profile1;

          ? alter profile profile1 limit
          ? passowrd_lock_time 1/24? --one hour
          5 passowrd expiration and aging
          ?passwowd_life_time lifetime of the passowrd in days? after which the password expires(有效期)
          ?password_grace_time grace period in days for changing the password after the first????????????????????? successful login afteer the password has expired(鎖定期)
          ?e.g
          ?alter profile profile1 limit
          ?password_life_time 2
          ?password_grace_time 3;
          6 password history
          ?password_reuse_time:number of days before a passowrd and be resued
          ?password _reuse_max:maxum number of times password can bee reused
          ?e.g
          ?alter profile profile1 limit
          ?password_reuse_time 10
          ?password_reuse_max 3;
          7passowrd Verification(study latter)
          8drop a profile
          ?drop profile profile1 (cascade);
          the user will use the default profile.it will take effect on the new session.
          9 Resource Management
          ?Resource mangement limits can be enforced at the session level,the call level or both
          ?limits can be defined by profiles using the create profile command
          ?enable resource limints with the
          ? .resource_limit initialization parameter
          ?? alter system command
          ?e.g
          ?alter system set resource_limit=true;
          10 setting a Resdource limits at session level
          ? cup_per_session : total cpu time measured in hundredths of seconds (百分之一秒)
          ? sessions_per_user: number of coucurrent sessions allowed for each username
          ? connect_time:elapsed connect time measured in minutes
          ? idle_time :periods of inactive time measured in minutes
          ? logical_reads_per_session: number of data blocks
          ? private_sga :measure in reads
          ? e.g
          ? alter profile profile1 limit
          ? cpu_per_session 100000
          ? connect_time 60
          ? idle_time 5;
          ?
          ? alter user test profile profile1

          11 Setting Resource limits at call level?
          ?e.g
          ?alter profile profile1
          ?cpu_per_call 1000? -- cup time per call in
          ?logical_reads_per_call --number of data balock that can be read per call
          ?
          ? create profile develper_prof limit
          ?? session_per_user2
          ?? cpu_per_session 10000
          ?? idle_time 60
          ?? connect_time 480
          12 Managing Resources using database resource manager
          ?? 1)Provides the oracle server with more control over resorce management decisions
          ?? 2)elements of database resorcee manager
          ??? resource consumer group
          ??? resourcee plan
          ??? resource allocation method
          ??? resource plan directives
          ?? 3)dbms_resource_manager package is uerd to create and maintain elements
          ?? 4)requires administer_resource_manager privilege
          ??? desc dbms_resoource_manager
          13 0btaining password and resource limits informaiton
          ? information about password and resource limits can be obtained by querying the data dictonary
          ?? dba_users
          ?? select * from users;
          ?? dba_profiles
          ?? select * from dba_profiles where profile='PROFILE1'

          posted on 2006-10-11 14:41 康文 閱讀(220) 評論(0)  編輯  收藏 所屬分類: 數據庫

          <2006年10月>
          24252627282930
          1234567
          891011121314
          15161718192021
          22232425262728
          2930311234

          導航

          統計

          常用鏈接

          留言簿(1)

          隨筆分類

          隨筆檔案

          文章檔案

          搜索

          最新評論

          閱讀排行榜

          評論排行榜

          主站蜘蛛池模板: 嘉峪关市| 涪陵区| 黄陵县| 吉水县| 平山县| 湘阴县| 鹰潭市| 万州区| 渝北区| 明星| 鄂托克旗| 芜湖县| 盖州市| 新沂市| 张家港市| 卢湾区| 哈密市| 峨眉山市| 鲁甸县| 大悟县| 宁河县| 得荣县| 东明县| 都安| 商城县| 秀山| 昆山市| 蓝山县| 天镇县| 洛南县| 荆门市| 聂荣县| 忻州市| 赣榆县| 平原县| 锦屏县| 成都市| 丰顺县| 通江县| 曲松县| 绥阳县|