ORACLE profile系列3 --resource_parameters以及password_parameters

     本篇主要说一下使用proffile做资源管理和密码管理时用到的resource_parameters和password_parameters：

resource_parameters

SESSIONS_PER_USER Specify the number of concurrent sessions to which you want to limit the user.

##SESSIONS_PER_USER 用来限制一个用户的并发会话数

CPU_PER_SESSION Specify the CPU time limit for a session, expressed in hundredth of seconds.

##CPU_PER_SESSION 用来限制一个会话使用的cpu时间，单位是百分之一秒。

CPU_PER_CALL Specify the CPU time limit for a call (a parse, execute, or fetch), expressed in hundredths of seconds.

##CPU_PER_CALL Specify 用来指定每一个call的cpu时间限制，单位是百分之一秒

CONNECT_TIME Specify the total elapsed time limit for a session, expressed in minutes.

##CONNECT_TIME 限制一个会话消耗的时间，单位是分钟

IDLE_TIME Specify the permitted periods of continuous inactive time during a session, expressed in minutes. Long-running queries and other operations are not subject to this limit.

##IDLE_TIME 用来限制会话持续不活跃的时间，单位是分钟。

LOGICAL_READS_PER_SESSION Specify the permitted number of data blocks read in a session, including blocks read from memory and disk.

##LOGICAL_READS_PER_SESSION用来限制一个会话读取的数据块数，包括逻辑读和物理读(从后面including blocks read from memory and disk可以看出虽然参数的名字为logical_reads_per_session但是并不是只对逻辑读做限制)

LOGICAL_READS_PER_CALL Specify the permitted number of data blocks read for a call to process a SQL statement (a parse, execute, or fetch).

##LOGICAL_READS_PER_CALL 用来限制一个sql语句的某一个调用(call)读取的数据块数(如解析，执行，提取)

PRIVATE_SGA Specify the amount of private space a session can allocate in the shared pool of the system global area (SGA). Refer tosize_clause for information on that clause.

##PRIVATE_SGA 限制一个会话能够在sga的shared pool中分配的私有内存空间的大小(指的就是我们平常说的UGA，只有在共享服务模式下，UGA才会从shared pool中分配)

Note:

This limit applies only if you are using shared server architecture. The private space for a session in the SGA includes private SQL and PL/SQL areas, but not shared SQL and PL/SQL areas.

##注意，PRIVATE_SGA 参数只有在shared server架构下才起作用

COMPOSITE_LIMIT Specify the total resource cost for a session, expressed inservice units. Oracle Database calculates the total service units as a weighted sum ofCPU_PER_SESSION,CONNECT_TIME,LOGICAL_READS_PER_SESSION, andPRIVATE_SGA.

##COMPOSITE_LIMIT用来对一个会话使用的总的资源做限制，用service单元来表示。oracle把CPU_PER_SESSION，CONNECT_TIME，LOGICAL_READS_PER_SESSION，PRIVATE_SGA的加权值作为会话的total service units。

See Also:

• ALTER RESOURCE COST for information on how to specify the weight for each session resource

• "Setting Profile Resource Limits: Example"

password_parameters

Use the following clauses to set password parameters. Parameters that set lengths of time—that is, all the password parameters exceptFAILED_LOGIN_ATTEMPTS andPASSWORD_REUSE_MAX—are interpreted in number of days. For testing purposes you can specify minutes (n/1440) or even seconds (n/86400) for these parameters. You can also use a decimal value for this purpose (for example .0833 for approximately one hour). The minimum value is 1 second. The maximum value is 24855 days. ForFAILED_LOGIN_ATTEMPTS andPASSWORD_REUSE_MAX, you must specify an integer.

##除了FAILED_LOGIN_ATTEMPTS，PASSWORD_REUSE_MAX用天数表示以外，其他的password参数都是用天数表示。为了测试你也可以为那些参数指定分钟或者秒(n/1440,n/86400)，你也可以用小数来表示，这些参数的最小值为一秒，最大值为24855天。FAILED_LOGIN_ATTEMPTS ，PASSWORD_REUSE_MAX指定的值必须为整数。

FAILED_LOGIN_ATTEMPTS Specify the number of consecutive failed attempts to log in to the user account before the account is locked. If you omit this clause, then the default is 10 times.

##FAILED_LOGIN_ATTEMPTS 指定用户连续登陆失败被锁定的次数，如果你不指定，那么这个参数默认值是10次(关于默认值有必要多说两句，对于一个普通profile，如果你不指定某个参数，那么该参数会被指定为default profile中的参数值。对于default profile，除了FAILED_LOGIN_ATTEMPTS，PASSWORD_LIFE_TIME，PASSWORD_VERIFY_FUNCTION，PASSWORD_LOCK_TIME，PASSWORD_GRACE_TIME外，其他参数默认值都是unlimited)

PASSWORD_LIFE_TIME Specify the number of days the same password can be used for authentication. If you also set a value forPASSWORD_GRACE_TIME, then the password expires if it is not changed within the grace period, and further connections are rejected. If you omit this clause, then the default is 180 days.

##PASSWORD_LIFE_TIME 指定密码有效期(默认值为180)。如果你设置了PASSWORD_GRACE_TIME参数，当密码到期后，你还可以登录，但是会有警告。如果在宽限期内你没有更改密码，那么宽限期过后你的将不能登录。

See Also:

Oracle Database Security Guide for information on settingPASSWORD_LIFE_TIME to a low value

PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX These two parameters must be set in conjunction with each other.PASSWORD_REUSE_TIME specifies the number of days before which a password cannot be reused.PASSWORD_REUSE_MAX specifies the number of password changes required before the current password can be reused. For these parameter to have any effect, you must specify a value for both of them.

##PASSWORD_REUSE_TIME ， PASSWORD_REUSE_MAX两个参数必须结合使用。PASSWORD_REUSE_TIME指定密码可以被重用的周期，PASSWORD_REUSE_MAX指定密码不能重复使用次数间隔。想使这两个参数中的某一个生效，那么必须两个参数都被设置。(参数值只能为整数)

• If you specify a value for both of these parameters, then the user cannot reuse a password until the password has been changed the number of times specified forPASSWORD_REUSE_MAX during the number of days specified forPASSWORD_REUSE_TIME.

  For example, if you specify PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to 10, then the user can reuse the password after 30 days if the password has already been changed 10 times.##例子，如果PASSWORD_REUSE_TIME设置为30，PASSWORD_REUSE_MAX设置为10，那么一个使用过的密码只有在30天之后，并且用户密码已经被更改10次以上后才能被重新使用

• If you specify a value for either of these parameters and specify UNLIMITED for the other, then the user can never reuse a password.##如果给两个参数中的一个赋值，另一个指定为unlimited，那么密码始终不能被重用。

• If you specify DEFAULT for either parameter, then Oracle Database uses the value defined in theDEFAULT profile. By default, all parameters are set toUNLIMITED in theDEFAULT profile. If you have not changed the default setting ofUNLIMITED in the DEFAULT profile, then the database treats the value for that parameter asUNLIMITED.##如果你给某个参数指定为default，那么该参数会使用default profile中该参数的值。

• If you set both of these parameters to UNLIMITED, then the database ignores both of them. This is the default if you omit both parameters.

PASSWORD_LOCK_TIME Specify the number of days an account will be locked after the specified number of consecutive failed login attempts. If you omit this clause, then the default is 1 day.

##PASSWORD_LOCK_TIME 指定用户触发锁定条件后被锁定的时间，如果你省略了该参数，该参数会取默认值1，单位是天

PASSWORD_GRACE_TIME Specify the number of days after the grace period begins during which a warning is issued and login is allowed. If you omit this clause, then the default is 7 days.

##PASSWORD_GRACE_TIME指定用户密码到期后，宽限期限。如果你省略该参数，该参数取默认值7，单位是天

PASSWORD_VERIFY_FUNCTION The PASSWORD_VERIFY_FUNCTION clause lets a PL/SQL password complexity verification script be passed as an argument to theCREATEPROFILE statement. Oracle Database provides a default script, but you can create your own routine or use third-party software instead.

##PASSWORD_VERIFY_FUNCTION指定密码复杂度验证函数(oracle 为我们提供了一个密码验证函数：$ORACLE_HOME/rdbms/admin/utlpwdmg.sql)

• For function, specify the name of the password complexity verification routine.

• Specify NULL to indicate that no password verification is performed.

If you specify expr for any of the password parameters, then the expression can be of any form except scalar subquery expression.