Oracle Profile parameter changes for SAPUPROF

[SAPSupport]

Hi SAP, 

During the Security audit it is recommended for update the below profile parameters for Oracle Database. 

Could you please let us know if there are any impact while changing the parameters and let us know how we can change the parameters to applicable for SAPUPROF profiles. Thanks

OraclePASSWORD_REUSE_TIME365PASSWORD_VERIFY_FUNCTIONEnableFAILED_LOGIN_ATTEMPTS5PASSWORD_LIFE_TIME90IDLE_TIME30PASSWORD_LOCK_TIME0

Please check and update us asap so that will change the audit parameters asap. Thanks 

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[JamesZ]

how to change, for example SAP KBA: 2286491alter profile <SAP_PROFILE> limit IDLE_TIME unlimited;

[SAPSupport · Accepted solution]

Please refer to below SAP note to understand the profile:

1519872 - SAP Database User Profile SAPUPROF

And you can change the parameter under SAPUPROF, for example FAILED_LOGIN_ATTEMPTS.
And there is no impact ONLY IF the user password matched the parameter/SAPUPROF.

For example, FAILED_LOGIN_ATTEMPTS =5. If sap schema user, sapsr3 failed to log on database five times,
the sapsr3 will be blocked, which results your SAP will not able to connect database.

All in all, you can change SAPUPROF's parameter, but do ensure you meet the policy, otherwise sapr3 user will be blocked,
once the SAPUPROF's parameter is violated.

[JamesZ · Accepted solution]

how to change can refer to sap kba 2286491

[JamesZ · Accepted solution]

how to change check SAP KBA how to change, for example SAP KBA: 2286491 alter profile <SAP_PROFILE> limit IDLE_TIME unlimited;