本站中文解释
ADG_ACCOUNT_INFO_TRACKING参数控制在应用程序调用connect时,实例间共享是否跟踪账号信息的选项。
如要启用这一特性,ADG_ACCOUNT_INFO_TRACKING值可以设置为true, 这样实例就会跟踪账号信息:
ALTER SYSTEM SET adg_account_info_tracking=’true’ SCOPE=SPFILE;
然后再次启动数据库实例以使其生效。
更改此参数后,应用程序将调用connect时获取该信息,从而便于管理实例间共享的账号信息。
官方英文解释
ADG_ACCOUNT_INFO_TRACKING
controls login attempts of users on Oracle Active Data Guard standby databases. It extends the control of user account security information.
Property | Description |
---|---|
Parameter type |
String |
Syntax |
|
Default value |
|
Modifiable |
No |
Modifiable in a PDB |
Yes |
Basic |
No |
Oracle RAC |
The same value must be used on all instances. |
Setting ADG_ACCOUNT_INFO_TRACKING
to LOCAL
(the default value) continues to enforce the default behavior, by maintaining a local copy of users account information in the standby’s in-memory view. Login failures are only tracked locally on a per database basis, and login is denied when the failure maximum is reached.
Setting the parameter to GLOBAL
triggers a more secure behavior, by maintaining a single global copy of users account information across all Data Guard databases (primary and standby). Login failures across all databases in the Data Guard configuration count towards the maximum count and logins anywhere will be denied when the count is reached. This setting improves security against login attacks across a production database and all Active Data Guard standby databases.