ORACLE如何查看當前帳號的相關信息總結

關於Oracle數據庫的帳號，咱們在維護數據庫的時候，偶爾可能須要獲取一些特殊信息。例如，帳號的建立時間、帳號的狀態、帳號的鎖定時間.....。正常狀況下，咱們能夠經過DBA_USERS獲取大部分相關信息。可是有一些特殊信息，還必須經過不經常使用底層基表sys.user$來獲取。

 

SQL> DESC DBA_USERS;

 Name                                      Null?    Type

 ----------------------------------------- -------- ----------------------------

 USERNAME                                  NOT NULL VARCHAR2(30)

 USER_ID                                   NOT NULL NUMBER

 PASSWORD                                           VARCHAR2(30)

 ACCOUNT_STATUS                            NOT NULL VARCHAR2(32)

 LOCK_DATE                                          DATE

 EXPIRY_DATE                                        DATE

 DEFAULT_TABLESPACE                        NOT NULL VARCHAR2(30)

 TEMPORARY_TABLESPACE                      NOT NULL VARCHAR2(30)

 CREATED                                   NOT NULL DATE

 PROFILE                                   NOT NULL VARCHAR2(30)

 INITIAL_RSRC_CONSUMER_GROUP                        VARCHAR2(30)

 EXTERNAL_NAME                                      VARCHAR2(4000)

 

其實咱們常常使用的DBA_USERS是同義詞，對應SYS.DBA_USERS這個視圖。若是你想查看SYS.DBA_USERS的定義，能夠經過下面方式：

 

--ORACLE 10g

SQL>SELECT DBMS_METADATA.GET_DDL('VIEW', 'DBA_USERS', 'SYS') FROM DUAL;

 CREATE OR REPLACE FORCE VIEW "SYS"."DBA_USERS" (

  "USERNAME"

, "USER_ID"

, "PASSWORD"

, "ACCOUNT_STATUS"

, "LOCK_DATE"

, "EXPIRY_DATE"

, "DEFAULT_TABLESPACE"

, "TEMPORARY_TABLESPACE"

, "CREATED"

, "PROFILE"

, "INITIAL_RSRC_CONSUMER_GROUP"

, "EXTERNAL_NAME") AS 

  select u.name, u.user#, u.password,

       m.status,

       decode(u.astatus, 4, u.ltime,

                         5, u.ltime,

                         6, u.ltime,

                         8, u.ltime,

                         9, u.ltime,

                         10, u.ltime, to_date(NULL)),

       decode(u.astatus,

              1, u.exptime,

              2, u.exptime,

              5, u.exptime,

              6, u.exptime,

              9, u.exptime,

              10, u.exptime,

              decode(u.ptime, '', to_date(NULL),

                decode(pr.limit#, 2147483647, to_date(NULL),

                 decode(pr.limit#, 0,

                   decode(dp.limit#, 2147483647, to_date(NULL), u.ptime +

                     dp.limit#/86400),

                   u.ptime + pr.limit#/86400)))),

       dts.name, tts.name, u.ctime, p.name,

       nvl(cgm.consumer_group, 'DEFAULT_CONSUMER_GROUP'),

       u.ext_username

       from sys.user$ u left outer join sys.resource_group_mapping$ cgm

            on (cgm.attribute = 'ORACLE_USER' and cgm.status = 'ACTIVE' and

                cgm.value = u.name),

            sys.ts$ dts, sys.ts$ tts, sys.profname$ p,

            sys.user_astatus_map m, sys.profile$ pr, sys.profile$ dp

       where u.datats# = dts.ts#

       and u.resource$ = p.profile#

       and u.tempts# = tts.ts#

       and u.astatus = m.status#

       and u.type# = 1

       and u.resource$ = pr.profile#

       and dp.profile# = 0

       and dp.type#=1

       and dp.resource#=1

       and pr.type# = 1

       and pr.resource# = 1

 

經過上面的視圖定義，咱們能夠知道，大部分數據來自於底層基表sys.user$。關於表sys.user$的結構以下，咱們能夠從sql.bsq中能夠看到sys.user$的定義。

 

 

SQL> DESC sys.user$

 Name                                      Null?    Type

 ----------------------------------------- -------- ----------------------------

 USER#                                     NOT NULL NUMBER

 NAME                                      NOT NULL VARCHAR2(30)    

 TYPE#                                     NOT NULL NUMBER

 PASSWORD                                           VARCHAR2(30)

 DATATS#                                   NOT NULL NUMBER

 TEMPTS#                                   NOT NULL NUMBER

 CTIME                                     NOT NULL DATE

 PTIME                                              DATE

 EXPTIME                                            DATE

 LTIME                                              DATE

 RESOURCE$                                 NOT NULL NUMBER

 AUDIT$                                             VARCHAR2(38)

 DEFROLE                                   NOT NULL NUMBER

 DEFGRP#                                            NUMBER

 DEFGRP_SEQ#                                        NUMBER

 ASTATUS                                   NOT NULL NUMBER

 LCOUNT                                    NOT NULL NUMBER

 DEFSCHCLASS                                        VARCHAR2(30)

 EXT_USERNAME                                       VARCHAR2(4000)

 SPARE1                                             NUMBER

 SPARE2                                             NUMBER

 SPARE3                                             NUMBER

 SPARE4                                             VARCHAR2(1000)

 SPARE5                                             VARCHAR2(1000)

 SPARE6                                             DATE

 

其中，咱們能夠獲取一下關鍵字段信息，具體以下

 

NAME         用戶（User）或角色（Role）的名字 

TYPE#        0表示Role，1表示User

CTIME        用戶的建立時間

PTIME        密碼最後一次修改時間

EXPTIME      密碼過時的時間

LTIME        帳號最後一次鎖定的時間

LCOUNT       用戶登陸失敗次數。

 

下面咱們簡單測試驗證一下，

 

SQL> CREATE USER TEST IDENTIFIED BY "Test#1232134$#3" DEFAULT TABLESPACE TBS_TEST_DATA TEMPORARY TABLESPACE  TEMP;

User created.

SQL> GRANT CONNECT TO TEST;

SQL> @get_user_info.sql

Session altered.

Enter value for user_name: TEST

old   9: WHERE NAME=('&USER_NAME')

new   9: WHERE NAME=('TEST')

NAME                                TYPE# CTIME               PTIME               EXPTIME             LTIME                   LCOUNT

------------------------------ ---------- ------------------- ------------------- ------------------- ------------------- ----------

TEST                                    1 2021-06-10 14:10:01 2021-06-10 14:10:01                                                  0

SQL> ALTER USER TEST IDENTIFIED BY "kER124";

User altered.

SQL> @get_user_info.sql

Session altered.

Enter value for user_name: TEST

old   9: WHERE NAME=('&USER_NAME')

new   9: WHERE NAME=('TEST')

NAME                                TYPE# CTIME               PTIME               EXPTIME             LTIME                   LCOUNT

------------------------------ ---------- ------------------- ------------------- ------------------- ------------------- ----------

TEST                                    1 2021-06-10 14:10:01 2021-06-10 14:10:50                                                  0

SQL> ALTER USER TEST ACCOUNT LOCK;

User altered.

SQL> @get_user_info.sql

Session altered.

Enter value for user_name: TEST

old   9: WHERE NAME=('&USER_NAME')

new   9: WHERE NAME=('TEST')

NAME                                TYPE# CTIME               PTIME               EXPTIME             LTIME                   LCOUNT

------------------------------ ---------- ------------------- ------------------- ------------------- ------------------- ----------

TEST                                    1 2021-06-10 14:10:01 2021-06-10 14:10:50                     2021-06-10 14:11:27          0

SQL> 

 

 

其中get_user_info.sql的腳本以下

 

$ more get_user_info.sql 

ALTER SESSION SET NLS_DATE_FORMAT='YYYY-MM-DD HH24:MI:SS';

SELECT  NAME

      , TYPE#

      , CTIME

      , PTIME

      , EXPTIME

      , LTIME

      , LCOUNT

FROM user$

WHERE NAME=('&USER_NAME');

 

另外，咱們來測試一下帳號登陸失敗次數，在實驗前先解鎖帳號，用錯誤的帳號密碼嘗試登陸數據庫，你會發現LCOUNT就變成1了。

 

SQL> @get_user_info.sql

Session altered.

Enter value for user_name: TEST

old   9: WHERE NAME=('&USER_NAME')

new   9: WHERE NAME=('TEST')

NAME                                TYPE# CTIME               PTIME               EXPTIME             LTIME                   LCOUNT

------------------------------ ---------- ------------------- ------------------- ------------------- ------------------- ----------

TEST                                    1 2021-06-10 14:10:01 2021-06-10 14:10:50                     2021-06-10 14:11:27          1

SQL> 

 

那麼這個LCOUNT字段的值是一直累加到超過閾值鎖定呢？仍是中間會清零呢？什麼狀況下會清零呢？ 若是你使用正確的密碼成功登陸數據庫後，你會發現LCOUNT的值就清零了。以下截圖所示：

 

$ sqlplus /nolog

SQL*Plus: Release 10.2.0.4.0 - Production on Thu Jun 10 14:30:41 2021

Copyright (c) 1982, 2007, Oracle.  All Rights Reserved.

SQL> connect TEST

Enter password: 

Connected.

 

 

也就是說，只要你在鎖定以前，一旦成功登陸以後，該計數會被清零。在有些版本中，因爲Bug，也會出現LCOUNT沒有正確反映登陸失敗次數的狀況，例如Lcount neither reset on correct login nor incremented after incorrect login thru JDBC (Doc ID 2675398.1)中記錄了這樣的Bug。另外，ORACLE 12C 後新增了一個功能，它會記錄用戶的最後一次登陸時間：SPARE6字段記錄用戶的最後一次登陸時間

 

 

參考資料：

 

 

https://www.eygle.com/archives/2009/07/profile_failed_login_attempts.html

https://dbaora.com/sys-user-table-in-oracle-last-password-change-time-last-locked-last-expired-creation-time-failed-logon/

Lcount neither reset on correct login nor incremented after incorrect login thru JDBC (Doc ID 2675398.1)

https://bijoos.com/oraclenotes/2013/153/