RE: Username with failed login
- From: "David Wendelken" <davewendelken@xxxxxxxxxxxxx>
- To: <oracle-l@xxxxxxxxxxxxx>
- Date: Mon, 15 Aug 2005 14:59:46 -0400
I think he wants to know which user didn't log in correctly.
"NOTAUSER" won't let him know to call Marge Smith and ask her if she's just
clumsy on the keyboard or someone is trying to hack the system using her
username.
Unless "NOTAUSER" is just a dummy-value you made up for the example?
>
>Instead of coding this by hand, why not just leverage the
>provided functionality?
>
>SQL> show parameter audit_trail
>
>NAME TYPE VALUE
>------------------------------------ -----------
>------------------------------
>audit_trail string TRUE
>
>SQL> audit session whenever not successful;
>
>Audit succeeded.
>
>SQL> connect notauser/notmypass@mydb
>ERROR:
>ORA-01017: invalid username/password; logon denied
>
>
>Warning: You are no longer connected to ORACLE.
>
>after reconnecting with a prvileged account:
>
> 1 select username, userhost, returncode
> 2 from dba_audit_session
> 3 where timestamp>sysdate-1/24
> 4* and username='NOTAUSER'
>SQL> /
>
>USERNAME USERHOST RETURNCODE
>--------------- ------------------------------ ----------
>NOTAUSER MYDOMAIN\MYDESKTOP 1017
>
>hth.
>
>Pd
>--
>//www.freelists.org/webpage/oracle-l
>
--
//www.freelists.org/webpage/oracle-l
Other related posts: