Home » RDBMS Server » Server Administration » ORA-28000: the account is locked - how to investigate it ?
ORA-28000: the account is locked - how to investigate it ? [message #675496] Tue, 02 April 2019 07:58 Go to next message
a100
Messages: 24
Registered: March 2019
Junior Member
Hi all,
I got the following error while trying to connect to remote DB with a script:
ORA-28000: the account is locked
How do I investigate what caused this lock ?
Re: ORA-28000: the account is locked - how to investigate it ? [message #675497 is a reply to message #675496] Tue, 02 April 2019 08:09 Go to previous messageGo to next message
BlackSwan
Messages: 26614
Registered: January 2009
Location: SoCal
Senior Member
I can only think of 2 ways an account gets locked.
1) Somebody manually issued SQL to LOCK the account.
2) there were repeated login failures & Oracle locked the account to prevent hacker from breaking into this account.
Re: ORA-28000: the account is locked - how to investigate it ? [message #675498 is a reply to message #675497] Tue, 02 April 2019 08:43 Go to previous messageGo to next message
a100
Messages: 24
Registered: March 2019
Junior Member
Thanks @BlackSwan - will investigate the second option Smile
Re: ORA-28000: the account is locked - how to investigate it ? [message #675499 is a reply to message #675498] Tue, 02 April 2019 08:55 Go to previous messageGo to next message
BlackSwan
Messages: 26614
Registered: January 2009
Location: SoCal
Senior Member
a100 wrote on Tue, 02 April 2019 06:43
Thanks @BlackSwan - will investigate the second option Smile

If the connection requests originated from a remote client over SQL*Net, then listener.log file will show ACCOUNT_NAME in it.
Re: ORA-28000: the account is locked - how to investigate it ? [message #675504 is a reply to message #675496] Tue, 02 April 2019 11:51 Go to previous messageGo to next message
Michel Cadot
Messages: 66679
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

ORA-28000: the account is locked
 *Cause:   The user has entered wrong password consequently for maximum
           number of times specified by the user's profile parameter
           FAILED_LOGIN_ATTEMPTS, or the DBA has locked the account
 *Action:  Wait for PASSWORD_LOCK_TIME or contact DBA
You can check if this is one case or the other one with the status of the account in DBA_USERS.
If it is the case of "ALTER USER ACCOUNT LOCK" then the status is like "%LOCKED".
If it is the case of bad logins then the status is like "%LOCKED(TIMED)".

Re: ORA-28000: the account is locked - how to investigate it ? [message #675505 is a reply to message #675504] Tue, 02 April 2019 13:08 Go to previous messageGo to next message
JPBoileau
Messages: 76
Registered: September 2017
Member
Also, since it hasn't been mentioned... If you are using OS Authentication, your OS user may be locked out. You'd need to talk to the Sys Admin to see how and why it happened.

JP
Re: ORA-28000: the account is locked - how to investigate it ? [message #676662 is a reply to message #675505] Sat, 29 June 2019 21:57 Go to previous messageGo to next message
Akmmhto
Messages: 25
Registered: September 2018
Junior Member
If audit is enabled , then you can query from dba_audit_trail to find the culprit.
Re: ORA-28000: the account is locked - how to investigate it ? [message #676663 is a reply to message #676662] Sat, 29 June 2019 22:31 Go to previous messageGo to next message
BlackSwan
Messages: 26614
Registered: January 2009
Location: SoCal
Senior Member
Akmmhto wrote on Sat, 29 June 2019 19:57
If audit is enabled , then you can query from dba_audit_trail to find the culprit.

OP last logged onto this forum 2 April so likely won't benefit from advice above any time in the near future.
Re: ORA-28000: the account is locked - how to investigate it ? [message #676678 is a reply to message #676663] Wed, 03 July 2019 09:49 Go to previous message
a100
Messages: 24
Registered: March 2019
Junior Member
But I get e-mails Smile
Previous Topic: Migration of Oracle Database 11g R2 from 32 bit to 64 bit
Next Topic: Service name or network name of service icdbXDB in the PDB is invalid or conflicts with an existing
Goto Forum:
  


Current Time: Mon Nov 11 23:41:05 CST 2019