Password expiration on Oracle databases for repositories

[Jan_van_Ansem]

We have conveniently created users for Designer on Oracle for whom the password never expires.

Designer does not seem to have an option to change a user password. Our users will not get direct database access through other tools.

Now the security team has (rightly so) challenged us why the users should have never expiring passwords.

I have two questions:

1. What happens if a user tries to logon when his password is expired or is about to expire? Will they be prompted for a new password?

2. Is it possible to change the designer (Oracle, or whatever database user) password, from designer? Changing it in Oracle is of no use to me as Data Services developers will not get database access to the actual repository databases.

Thanks in advance for your help,

Jan.

[Former Member · Accepted solution]

Hi, Jan.

1. What happens if a user tries to logon when his password is expired or is about to expire? Will they be prompted for a new password?

If the password is expired the user will receive a authentication error for username/password:

ORA-28001: the password has expired.

If the password is about to expire I cannot tell you for sure that no warning is displayed. But you will not be prompted by Designer to change the password. All the password changes are made in the database management tool.

2. Is it possible to change the designer (Oracle, or whatever database user) password, from designer? Changing it in Oracle is of no use to me as Data Services developers will not get database access to the actual repository databases.

As Designer has no password (what has a password is the database you are using as repository), the password change must be done in the database management tool.

Regards,

Leo.

[Former Member · Accepted solution]

Sorry. I didn't see this question was already answered. I kept the thread window opened for too long 😕

[Former Member]

No, you can't change Oracle or Underlying DS Repo user password from any of the DS application, if the password is changed it needs to be updated in DS (Management Console, re-enter in Desginer login if, remember is selected)

what is the version of DS ?

[Jan_van_Ansem]

Hi Manoj, thanks for your reply.

I'm using DS 12.2.x.x.

When I'm looking at the admin console, under management > repositories I can see a box for putting in a username/password.

However, I am not able to change the password from here.

Perhaps I should be more specific:

I know I can change users and passwords for Central repositories from the admin console.

What I am after is a way to change passwords (and unlock users, if possible) for local repositories.

It looks like these users are only maintained at database level, so I am not able to change the username for a local repository from the admin console, nor can I unlock a locked user (of a local repository).

If my understanding is correct, then the (local) repository user is an Oracle account and can only be managed by using a database management system like TOAD or SQL*Plus (for Oracle), or if your repository is installed on SQL Server you'll need access to SQL Server Management Studio or something similar.

Any thoughts?

Thanks,

Jan.