Tell me more ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.
up vote 3 down vote favorite
1

Why does Oracle Enterprise Manager reset my SYSMAN account to LOCKED(TIMED) status?

I've tried rebuilding Enterprise Manager, and re-installation of Enterprise Manager, which always works, until the next reboot, and back to where we started...

share|improve this question

2 Answers

up vote 3 down vote accepted

Benoit, you actually had a partial answer, everything you said was correct, but after next reboot, the account locked. After several hours of more research, the following issue was discovered, with the appropriate resolution.

Enterprise Manager had the default SYSMAN password stored for its credentials, and was trying to lock in with that password in rapid succession (300 times a minute or so according to the Event Log). Hence, after several rapid tries with the same wrong password, Oracle locks the account.

Setting a new password in SQL*PLUS or SQL Developer doesn't reset the password used to login to Enterprise Manager, to reset the password in enterprise manager, you need to open a command prompt and do the following:

emctl config oms sso -remove
emctl stop oms
emctl start oms

During the above commands, it'll prompt you for the current SYSMAN password, which you can enter, and it should remove the SYSMAN password used by your Enterprise Manager Console, replacing it with the one you just entered.

share|improve this answer
2  
Brian, you should mark this as the accepted answer, since it is the correct answer to the problem. Benoit may have good supporting information, but his is not the correct answer. – Leigh Riffel Oct 13 '11 at 13:02
An upvote for Beniot would be appropriate as "everything he said was correct" - perhaps you could post a single answer with a complete solution including @Beniot's suggestion and mark it as accepted – Jack Douglas♦ Oct 13 '11 at 13:28
Also, does "it should reset the SYSMAN password" mean "it should remove the SYSMAN password" – Jack Douglas♦ Oct 13 '11 at 13:30
Actually, it only removes the SYSMAN password from the enterprise manager console, until you restart it with the last line, emctl start oms, that line prompts you to re-enter the new password, and resets the SYSMAN password in enterprise managers stored credentials. I'll go ahead and edit my answer and accept it as the answer with credit to Benoit tomorrow. Stack Exchange won't let me do it today, says I need to wait until tomorrow. – Brian Deragon Oct 13 '11 at 14:10
1  
My answer was wrong about the reason why the account has been locked. I corrected it. – Benoit Oct 14 '11 at 9:05
up vote 1 down vote

The status "LOCKED(TIMED)" means that the account has been locked because the password has expired and must be changed.

This has nothing to do with OEM. It is related to the profile assigned to your SYSMAN account.

You can run the following query (need read on DBA_* views) to check:

select
    p.profile as "Profile",
    p.limit as "Limit"
from
    dba_profiles p,
    dba_users u
where
    u.USERNAME='SYSMAN'
    and u.profile=p.profile
    and p.resource_name='PASSWORD_LIFE_TIME'
;

It will give you the name of the profile and the amount of time (in days) after which the password must be changed.

You can remove the password life time with the following:

alter profile "<PROFILE NAME>" limit password_life_time unlimited;

EDIT: "Locked(TIMED)" means the account has been locked because a wrong password has been entered to many time. It the password would have expired, the status would be "EXPIRED(GRACE)".

If Grid Control doesn't have the good password, you can modify the configuration using the following documentation: http://download.oracle.com/docs/cd/E11857_01/em.111/e16790/repository.htm#i1029558 (for OEM 11gR1).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.