IBM Support

Image Services: FileNet-controlled Oracle on 11g: database user password expiration

Preventive Service Planning


Abstract

In a FileNet-controlled (or FileNet runtime licensed) environment, if the Oracle database has already upgraded to 11g (version 11.1.0), a default profile called DEFAULT may have been assigned to IS users automatically by Oracle during the upgrade. This default profile requires passwords to be changed every 180 days or the passwords will expire and the user will be locked out of Oracle.

Content

IS FileNet-controlled customers may check the database for profile name and the expiration date as follows:

1) Login the IS system as fnsw user and connect to Oracle database as sysdba to query the dba_users dictionary view,

    #sqlplus “/as sysdba”
    SQL> select username, expiry_date, profile from dba_users where username like 'F_%';

Output may look like the sample below:
    SQL> select username, expiry_date, profile from dba_users where username like 'F_%';

    USERNAME EXPIRY_DA PROFILE
    ------------------------------ --------- ------------------------------
    F_SW 13-APR-10 DEFAULT
    F_OPEN 13-APR-10 DEFAULT
    F_SQI 13-APR-10 DEFAULT
    F_MAINT 13-APR-10 DEFAULT

To prevent IS users from being locked out of Oracle after 180 days, FileNet-controlled customers need to create a new profile and assign it to the four IS users as follows:

2) Use your preferred text editor such as vi to save the following to a file called /fnsw/oracle/fn_profile.sql
    CREATE PROFILE FN_PROFILE LIMIT
    PASSWORD_LIFE_TIME UNLIMITED
    PASSWORD_GRACE_TIME UNLIMITED
    PASSWORD_REUSE_TIME UNLIMITED
    PASSWORD_REUSE_MAX UNLIMITED
    FAILED_LOGIN_ATTEMPTS UNLIMITED
    PASSWORD_LOCK_TIME UNLIMITED
    PASSWORD_VERIFY_FUNCTION NULL;

    alter user f_sw profile fn_profile;
    alter user f_maint profile fn_profile;
    alter user f_sqi profile fn_profile;
    alter user f_open profile fn_profile;

3) Login to the IS system as fnsw user to execute the script that is just created:
    #sqlplus “/as sysdba”
    SQL> @/fnsw/local/fn_profile.sql
    SQL> exit
4) Repeat step 1) to check if fn_profile is assigned to the IS users. Output may look like the sample below:
    SQL> select USERNAME, EXPIRY_DATE, PROFILE from dba_users where USERNAME like 'F_%';

    USERNAME EXPIRY_DA PROFILE
    ------------------------------ --------- ------------------------------
    F_SQI FN_PROFILE
    F_MAINT FN_PROFILE
    F_SW FN_PROFILE
    F_OPEN FN_PROFILE

Empty string returned on EXPIRY_DATE means the password will never expire.
[{"Product":{"code":"SSNVUD","label":"FileNet Image Services"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Oracle","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"4.2;4.1.2","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

More support for:
FileNet Image Services

Software version:
4.2, 4.1.2

Operating system(s):
AIX, HP-UX, Linux, Solaris, Windows

Document number:
133531

Modified date:
23 June 2018

UID

swg21413895

Manage My Notification Subscriptions