Solution : https://service.sap.com/sap/support/notes/1519872 (SAP Service marketplace login required)
Summary :
This SAP note addresses the issue of SAP schema user passwords expiring, leading to various ORA-28001 errors and subsequently preventing SAP work processes from connecting to the database. It outlines that this problem typically arises due to the DEFAULT user profile's PASSWORD_LIFE_TIME setting in Oracle 11g, which is set to expire passwords after 180 days. To resolve this, the note recommends resetting the expired passwords using BRCONNECT and altering the user profile to SAPUPROF, which does not enforce password expiration. This involves creating and assigning the SAPUPROF profile to requisite SAP schema users and adjusting existing user profiles as needed to prevent future outages and enhance security compliance.
Key words :
oracle priority recommendations / additional info category installation information validity, oracle security sap notes 1522952 password complexity verification function 1431800 oracle 11, sql> create profile sapuprof limit failed_login_attempts unlimited password_life_time unlimited, oracle security sap notes 1911785 password expiration date shown, components bc-db-ora-ins installation sap system, __%pdfstyle%__ / } symptom database user profile sapuprof, 00433] log by2=>sql error 28001 performing con [dblink#8 @ 433][ dblink, central technical note attachments file namefile size, sap notes 1911785 password expiration date shown, locked 1522952 password complexity verification function 1868094 overview
Related Notes :
1911785 | Password expiration date shown for OPS$ users in DBA_USERS |
1868094 | Overview: Oracle Security SAP Notes |
1522952 | Password Complexity Verification Function |
1431800 | Oracle 11.2.0: Central Technical Note |
951167 | ORA-28000: the account is locked |