Why does Oracle Enterprise Manager reset my SYSMAN account to LOCKED(TIMED) status?
I've tried rebuilding Enterprise Manager, and re-installation of Enterprise Manager, which always works, until the next reboot, and back to where we started...
Benoit, you actually had a partial answer, everything you said was correct, but after next reboot, the account locked. After several hours of more research, the following issue was discovered, with the appropriate resolution.
Enterprise Manager had the default SYSMAN password stored for its credentials, and was trying to lock in with that password in rapid succession (300 times a minute or so according to the Event Log). Hence, after several rapid tries with the same wrong password, Oracle locks the account.
Setting a new password in SQL*PLUS or SQL Developer doesn't reset the password used to login to Enterprise Manager, to reset the password in enterprise manager, you need to open a command prompt and do the following:
During the above commands, it'll prompt you for the current SYSMAN password, which you can enter, and it should remove the SYSMAN password used by your Enterprise Manager Console, replacing it with the one you just entered.
The status "LOCKED(TIMED)" means that the account has been locked because the password has expired and must be changed.
This has nothing to do with OEM. It is related to the profile assigned to your SYSMAN account.
You can run the following query (need read on DBA_* views) to check:
It will give you the name of the profile and the amount of time (in days) after which the password must be changed.
You can remove the password life time with the following:
EDIT: "Locked(TIMED)" means the account has been locked because a wrong password has been entered to many time. It the password would have expired, the status would be "EXPIRED(GRACE)".
If Grid Control doesn't have the good password, you can modify the configuration using the following documentation: http://download.oracle.com/docs/cd/E11857_01/em.111/e16790/repository.htm#i1029558 (for OEM 11gR1).
If you are using Oracle with EM Console on Windows, your SYSMAN account will get locked periodically. This happens due to unordered start of DB Instance, DB Listener and EM Console. Correct order should be:
In case if you have your SYSMAN account locked, do following:
You should reset SYSMAN password in EM Console files, the easiest way would be running following command:
emctl setpasswd dbconsole
Now start the EM Console service and see if it works. Reboot the server to make sure everything still operates normally.