ALTER LOGIN POLICY Statement

Quick Links:

Syntax

Syntax 1

ALTER LOGIN POLICY policy-name 
   { { ADD | DROP | SET } LOGICAL SERVER ls-assignment-list 
   [ LOGICAL SERVER ls-override-list ])

ls-assignment-list - (back to Syntax 1)
   { { ls-name, ...}  
   | ALL 
   | COORDINATOR 
   | SERVER 
   | NONE 
   | DEFAULT }

ls-override-list - (back to Syntax 1)
   { ls-name, ...}

ls-name - (back to ls-assignment-list) or (back to ls-override-list)
   { OPEN | user-defined-ls-name }

Syntax 2

ALTER LOGIN POLICY policy-name policy-option

policy-option - (back to Syntax 2)
   policy-option-name = policy-option-value

policy-option-name - (back to policy-option)
  AUTO_UNLOCK_TIME 
   | CHANGE_PASSWORD_DUAL_CONTROL
   | DEFAULT_LOGICAL_SERVER 
   | LOCKED 
   | MAX_CONNECTIONS 
   | MAX_DAYS_SINCE_LOGIN 
   | MAX_FAILED_LOGIN_ATTEMPTS 
   | MAX_NON_DBA_CONNECTIONS 
   | PASSWORD_EXPIRY_ON_NEXT_LOGIN 
   | PASSWORD_GRACE_TIME 
   | PASSWORD_LIFE_TIME 
   | ROOT_AUTO_UNLOCK_TIME 
   | LDAP_PRIMARY_SERVER 
   | LDAP_SECONDARY_SERVER 
   | LDAP_AUTO_FAILBACK_PERIOD 
   | LDAP_FAILOVER_TO_STD 
   | LDAP_REFRESH_DN

policy-option-value - (back to policy-option)
   { UNLIMITED | DEFAULT | value }

Parameters

(back to top)

policy-name – the name of the login policy. Specify root to modify the root login policy.

policy-option-name – the name of the policy option. See Login Policy Options and LDAP Login Policy Options for details on each option.

policy-option-value – the value assigned to the login policy option. If you specify UNLIMITED, no limits are used. If you specify DEFAULT, the default limits are used. See Login Policy Options and LDAP Login Policy Options for supported values for each option.

Applies to

Simplex and multiplex.

Examples

(back to top)

Example 1 – see Logical Server Access Configuration and Multiplex Login Policy Configuration:
Example 2 – sets the password_life_time value to UNLIMITED and the max_failed_login_attempts value to 5 in the Test1 login policy:
```
ALTER LOGIN POLICY Test1 
password_life_time=UNLIMITED
max_failed_login_attempts=5;
```

Usage

(back to top)

If you do not specify a policy option, values for this login policy are taken from the root login policy. New policies do not inherit the MAX_NON_DBA_CONNECTIONS and ROOT_AUTO_UNLOCK_TIME policy options.

All new databases include a root login policy. You can modify the root login policy values, but you cannot delete the policy.

Permissions

(back to top)

Requires the MANAGE ANY LOGIN POLICY system privilege.