JDE database user # password retries

Hello

I tried to log into JDE in the fat client in the Deployment Server with my user id,

I got several errors. Then I tried with user id JDE and then errors again,

What I found in jde.log was ORA-28000 ACCOUNT LOCKED,



... because of the errors, the account JDE was locked (because of number of password retries exceeded), so all system went down !!!!


At a database level in Oracle, user JDE had a number of retries limit,


is that correct ?

Thanks


EnterpriseOne E8.12 Tools 8.98.14
Oracle

Good Morning,

At a database level, it is a security best practice to limit the number of failed attempts that any specific user id can make before they are locked. This is true with most security configurations in general.

You wouldn't want someone to be able to try non-stop (password attack application or the like) to connect to your database using the JDE account because, if they found the password, they would have administrator access to all of your OneWorld tables.

From a system integrity and up-time view, you don't want your system to go down for something as simple as your main account got locked out.

So, I would suggest you compromise by giving the JDE account unlimited bad password attempts, but have realtime logging that sends a notification when the incorrect password is supplied.

Hope that helps!