SAP Knowledge Base Article - Preview

3696890 - SYS user password expired, and user locked in physical standby Db ORA-28000: The account is locked

Symptom

The SYS user profile is set with PASSWORD_LIFE_TIME and FAILED_LOGIN_ATTEMPTS with any other value besides "unlimited"

Standby and primary DB sys user is locked and password expired. 

while trying to connect via DGMGRL:

DGMGRL SYS/<password>@STANDBY
ORA-28000: The account is locked

on Primary
-----------
select USERNAME, USER_ID, ACCOUNT_STATUS, PROFILE, LAST_LOGIN from dba_users where USERNAME='SYS';
>
USERNAME  USER_ID  ACCOUNT_STATUS  PROFILE   LAST_LOGIN
--------  -------  --------------  --------  -------------------
SYS       0        LOCKED           DEFAULT   18-DEC-25 12:45:10
  or
SYS       0        EXPIRED & LOCKED DEFAULT   18-DEC-25 12:45:10
  or
SYS       0        EXPIRED(GRACE)   DEFAULT   18-DEC-25 12:45:10

on Standby:
-----------
select USERNAME, USER_ID, ACCOUNT_STATUS, PROFILE, LAST_LOGIN from dba_users where USERNAME='SYS';  <-- This cant be run in standby as Physical standby is often in MOUNT mode.

SELECT USERNAME,PASSWORD_PROFILE,ACCOUNT_STATUS,LOCK_DATE  FROM v$pwfile_users;
>
USERNAME             PASSWORD_PROFILE     ACCOUNT_STATUS                 LOCK_DATE
-------------------- -------------------- ------------------------------ ---------
SYS                  DEFAULT              EXPIRED(GRACE) & LOCKED(TIMED) 18-DEC-25
                                         
BRT$ADM              DEFAULT              OPEN
DGOBSERVER           DEFAULT              OPEN


Read more...

Environment

Oracle data guard

Keywords

28000, ORA-28000, The account is locked, oracle, standby, sys , KBA , BC-DB-ORA , Oracle , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.