Symptom
The SYS user profile is set with PASSWORD_LIFE_TIME and FAILED_LOGIN_ATTEMPTS with any other value besides "unlimited"
Standby and primary DB sys user is locked and password expired.
while trying to connect via DGMGRL:
DGMGRL SYS/<password>@STANDBY
ORA-28000: The account is locked
on Primary
-----------
select USERNAME, USER_ID, ACCOUNT_STATUS, PROFILE, LAST_LOGIN from dba_users where USERNAME='SYS';
>
USERNAME USER_ID ACCOUNT_STATUS PROFILE LAST_LOGIN
-------- ------- -------------- -------- -------------------
SYS 0 LOCKED DEFAULT 18-DEC-25 12:45:10
or
SYS 0 EXPIRED & LOCKED DEFAULT 18-DEC-25 12:45:10
or
SYS 0 EXPIRED(GRACE) DEFAULT 18-DEC-25 12:45:10
on Standby:
-----------
select USERNAME, USER_ID, ACCOUNT_STATUS, PROFILE, LAST_LOGIN from dba_users where USERNAME='SYS'; <-- This cant be run in standby as Physical standby is often in MOUNT mode.
SELECT USERNAME,PASSWORD_PROFILE,ACCOUNT_STATUS,LOCK_DATE FROM v$pwfile_users;
>
USERNAME PASSWORD_PROFILE ACCOUNT_STATUS LOCK_DATE
-------------------- -------------------- ------------------------------ ---------
SYS DEFAULT EXPIRED(GRACE) & LOCKED(TIMED) 18-DEC-25
BRT$ADM DEFAULT OPEN
DGOBSERVER DEFAULT OPEN
Read more...
Environment
Oracle data guard
Keywords
28000, ORA-28000, The account is locked, oracle, standby, sys , KBA , BC-DB-ORA , Oracle , How To
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview