Hi Ian,
You may track it by checking date/time modifications of password file.
-- Password file before the change on password on my test machine
C:\oracle\product\12201\db_1\database>dir *.*
Volume in drive C is ORACLE
Volume Serial Number is 9C3E-E602
Directory of C:\oracle\product\12201\db_1\database
24/08/2018 03:19 <DIR> .
24/08/2018 03:19 <DIR> ..
14/08/2018 18:22 <DIR> archive
21/08/2018 04:42 2.048 hc_orcl.dat
21/12/2005 18:07 31.744 oradba.exe
14/08/2018 18:54 3.584 PWDorcl.ora
27/01/2019 07:25 18.563.072 SNCFORCL.ORA
27/01/2019 15:05 3.584 SPFILEORCL.ORA
-- Changing sys password
C:\oracle\product\12201\db_1\database>set oracle_sid=orcl
C:\oracle\product\12201\db_1\database>sqlplus sys as sysdba
SQL*Plus: Release 12.2.0.1.0 Production on Sun Jan 27 18:21:46 2019
Copyright (c) 1982, 2016, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 12c Standard Edition Release 12.2.0.1.0 - 64bit Production
SQL> alter user sys identified by oracle;
User altered.
Check password file timestamp again
C:\oracle\product\12201\db_1\database>dir *.*
Volume in drive C is ORACLE
Volume Serial Number is 9C3E-E602
Directory of C:\oracle\product\12201\db_1\database
27/01/2019 18:22 <DIR> .
27/01/2019 18:22 <DIR> ..
14/08/2018 18:22 <DIR> archive
21/08/2018 04:42 2.048 hc_orcl.dat
21/12/2005 18:07 31.744 oradba.exe
07/12/2018 17:21 1.920 oradim.log
27/01/2019 18:22 3.584 PWDorcl.ora
27/01/2019 07:25 18.563.072 SNCFORCL.ORA
27/01/2019 15:05 3.584 SPFILEORCL.ORA
All the Best,
Rodrigo Mufalani
Em 7 de jan de 2019, à(s) 19:24, MacGregor, Ian A.
<dmarc-noreply@xxxxxxxxxxxxx> escreveu:
We use the ptime column of the sys.user$ table to monitor password change
times. This still works for a normal user, but for sys the value does nit
change. This is true whether "alter user" or the password command is used.
Ian A. MacGregor
SLAC National Accelerator Laboratory
