講義軟件課件dba

1、ObjectivesAfter completing this lesson, you should be able to do the following:Manage passwords using profilesAdminister profilesControl use of resources using profilesObtain information about profiles, password management, and resourcesProfilesA profile is a named set of password and resource limit

2、sProfiles are assigned to users by the CREATE USER or ALTER USER commandCan be enabled or disabledCan relate to the DEFAULT profilePassword ManagementUserPassword expiration and agingPassword verificationPassword historyAccount lockingSetting up profilesEnabling Password ManagementSet up password ma

3、nagement by using profiles and assign them to users.Lock, unlock, and expire accounts using the CREATE USER or ALTER USER command.Password limits are always enforced.Password Account LockingParameterFAILED_LOGIN_ATTEMPTSPASSWORD_LOCK_TIME DescriptionNumber of failed login attempts before lockout of

4、the accountNumber of days the account is locked after the specified number of failed login attemptsPASSWORD_LOCK_TIME Password Expiration and AgingParameterLifetime of the password in days after which the password expiresGrace period in days for changing the password after the first successful login

5、 after the password has expiredPASSWORD_LIFE_TIMEPASSWORD_GRACE_TIMEParameterPassword HistoryParameterPASSWORD_REUSE_TIMEPASSWORD_REUSE_MAXDescriptionNumber of days before a password can be reusedMaximum number of times apassword can be reusedPassword VerificationParameterPASSWORD_VERIFY_FUNCTIONDes

6、criptionPL/SQL function that makes a password complexity check before a password is assignedUser-Provided Password FunctionFunction must be created in the SYS schema and must have the following specification:function_name( userid_parameter IN VARCHAR2(30), password_parameter IN VARCHAR2(30), old_pas

7、sword_parameter IN VARCHAR2(30)RETURN BOOLEANPassword Verification Function VERIFY_FUNCTIONMinimum length is four characters.Password should not be equal to username.Password should have at least one alphabetic, one numeric, and one special character.Password should differ from the previous password

8、 by at least three letters. Creating a Profile: Password SettingsCREATE PROFILE grace_5 LIMIT FAILED_LOGIN_ATTEMPTS 3 PASSWORD_LOCK_TIME UNLIMITED PASSWORD_LIFE_TIME 30 PASSWORD_REUSE_TIME 30 PASSWORD_VERIFY_FUNCTION verify_function PASSWORD_GRACE_TIME 5;Altering a Profile: Password SettingALTER PRO

9、FILE default FAILED_LOGIN_ATTEMPTS 3PASSWORD_LIFE_TIME 60PASSWORD_GRACE_TIME 10;Dropping a Profile: Password SettingDROP PROFILE developer_prof;DROP PROFILE developer_prof CASCADE;Resource ManagementResource management limits can be enforced at the session level, the call level, or both.Limits can b

10、e defined by profiles using the CREATE PROFILE command.Enable resource limits with the:RESOURCE_LIMIT initialization parameterALTER SYSTEM commandEnabling Resource LimitsSet the initialization parameter RESOURCE_LIMIT to TRUEEnforce the resource limits by enabling the parameter with the ALTER SYSTEM

11、 commandALTER SYSTEM SET RESOURCE_LIMIT=TRUE; ResourceCPU_PER_SESSION SESSIONS_PER_USERCONNECT_TIME IDLE_TIME LOGICAL_READS_PER _SESSIONPRIVATE_SGA DescriptionTotal CPU time measured in hundredths of secondsNumber of concurrent sessions allowed for each usernameElapsed connect time measured in minut

12、esPeriods of inactive time measured in minutesNumber of data blocks (physical and logical reads)Private space in the SGA measured in bytes (for Shared Server only)Setting Resource Limits at Session Level ResourceCPU_PER_CALLLOGICAL_READS_PER _CALLDescriptionCPU time per call in hundredths of seconds

13、Number of data blocks that can be read per callSetting Resource Limitsat Call LevelCreating a Profile:Resource LimitCREATE PROFILE developer_prof LIMIT SESSIONS_PER_USER 2 CPU_PER_SESSION 10000 IDLE_TIME 60 CONNECT_TIME 480;Managing Resources Using the Database Resource ManagerProvides the Oracle se

14、rver with more control over resource management decisionsElements of the Database Resource ManagerResource consumer groupResource planResource allocation methodResource plan directivesDBMS_RESOURCE_MANAGER package is used to create and maintain elementsRequires ADMINISTER_RESOURCE_MANAGER privilegeM

15、anaging Resources Using the Database Resource ManagerResource plans specify the resource consumer groups belonging to the plan.Resource plans contain directives for how resources are to be allocated among consumer groups.Resource Plan DirectivesThe Database Resource Manager provides several means of

16、 allocating resources.CPU MethodActive Session Pool and QueuingDegree of Parallelism LimitAutomatic Consumer Group SwitchingMaximum Estimated Execution TimeUndo PoolObtaining Password and Resource Limits InformationInformation about password and resource limits can be obtained by querying the data dictionary.DBA_USERSDBA_PRO