Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0010122Openbravo ERPZ. Otherspublic2009-07-30 09:482013-06-18 13:03
networkb 
gorka_gil 
immediatecriticalalways
closedfixed 
30
2.40 
 
OBPS
Core
No
0010122: The oracle password should not expire automatically without any message
The oracle password should expire automatically without any message, because it could happend that the production environment became inaccessible.

After a while working with the application the password of the user expires.
At least this functionality should be explained in the manual,
and an option to disable the expiration should be explained.
No tags attached.
related to feature request 0010149 closed gorka_gil Openbravo Deployment Options The database password should not expire automatically 
Issue History
2009-07-30 09:48networkbNew Issue
2009-07-30 09:48networkbAssigned To => jpabloae
2009-07-30 09:48networkbOBNetwork customer => Yes
2009-07-30 10:03networkbNote Added: 0018704
2009-07-30 13:46networkbSummaryThe oracle password should expire automatically without any message => The oracle password should not expire automatically without any message
2009-07-30 20:34gorka_gilAssigned Tojpabloae => gorka_gil
2009-07-31 12:57gorka_gilNote Added: 0018762
2009-08-01 17:57gorka_gilProjectOpenbravo Deployment Options => Documentation
2009-08-01 17:57gorka_gilStatusnew => scheduled
2009-08-01 17:57gorka_gilfix_in_branch => pi
2009-08-01 17:58gorka_gilStatusscheduled => resolved
2009-08-01 17:58gorka_gilResolutionopen => fixed
2009-08-01 17:58gorka_gilNote Added: 0018774
2009-08-01 18:07gorka_gilRelationship addedrelated to 0010149
2009-09-03 13:12priyamNote Added: 0019445
2009-11-10 12:55jpabloaeCategorySMB Network One => Z Other
2011-03-31 11:45networkbStatusresolved => closed
2013-06-18 13:00psanjuanProjectDocumentation => Openbravo ERP
2013-06-18 13:03psanjuanCategoryZ Other => Z. Others

Notes
(0018704)
networkb   
2009-07-30 10:03   
The expiration is defined in the profile:

select resource_name, resource_type, limit
from dba_profiles
where profile='DEFAULT';

indicate how could be configured this profile
depending on the clients requirements.
(0018762)
gorka_gil   
2009-07-31 12:57   
The default behavior in oracle 11g (the ones that comes with obn 2.40) is an expiration time for passwords of 180 days plus 7 grace days.

How to know that password is expired?
- In sqlplus shows a clear message when you try to connect.
- In web interface of Openbravo ERP shows an error saying it can't connect to database: javax.servlet.ServletException: @CODE=@There are no connections available in jdbc:apache:commons:dbcp:openbravo_myPool.
  Note: The web interface can work with the account expired till the next tomcat restart.

For check when expires the accounts, you can execute this with dba privileges:
  set line 120
  select username, account_status, expiry_date, lock_date from dba_users;

For change the passwords:
  Execute sqlplus and connect with the user of Openbravo ERP and it will ask you to change the password.
  Also you need to enter with the "system" account to reset its password.
  If you change any of the password, remember to update the Openbravo.properties file.
  Note: You can set the same password again.

For disable the password expiration.
  With dba privileges execute:
  ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED;
(0018774)
gorka_gil   
2009-08-01 17:58   
The missing documentation about oracle password expiration is here:

http://wiki.openbravo.com/wiki/Openbravo_SMB_Network_One_Administrator%27s_Manual_2.40#Database_password_expiration [^]
(0019445)
priyam   
2009-09-03 13:12   
Fixed in the appliance and available for QA to test