11g密码过期问题

11g密码过期问题
开发反映，应用帐号即将过期，提示修改密码，登录数据库查看用户状态为LOCKED(TIMED)

sys@TYOLAP1(dtydb3)>select * from dba_profiles order by 1;

PROFILE                        RESOURCE_NAME                    RESOURCE LIMIT
------------------------------ -------------------------------- -------- ----------------------------------------
APP_PROFILE                    PASSWORD_GRACE_TIME              PASSWORD DEFAULT
APP_PROFILE                    PASSWORD_LIFE_TIME               PASSWORD DEFAULT
APP_PROFILE                    FAILED_LOGIN_ATTEMPTS            PASSWORD DEFAULT
APP_PROFILE                    PRIVATE_SGA                      KERNEL   DEFAULT
APP_PROFILE                    CPU_PER_SESSION                  KERNEL   DEFAULT
APP_PROFILE                    CONNECT_TIME                     KERNEL   DEFAULT
APP_PROFILE                    IDLE_TIME                        KERNEL   DEFAULT
APP_PROFILE                    COMPOSITE_LIMIT                  KERNEL   DEFAULT
APP_PROFILE                    LOGICAL_READS_PER_CALL           KERNEL   DEFAULT
APP_PROFILE                    PASSWORD_REUSE_TIME              PASSWORD UNLIMITED
APP_PROFILE                    PASSWORD_REUSE_MAX               PASSWORD UNLIMITED

PROFILE                        RESOURCE_NAME                    RESOURCE LIMIT
------------------------------ -------------------------------- -------- ----------------------------------------
APP_PROFILE                    PASSWORD_VERIFY_FUNCTION         PASSWORD VERIFY_FUNCTION_11G
APP_PROFILE                    LOGICAL_READS_PER_SESSION        KERNEL   DEFAULT
APP_PROFILE                    PASSWORD_LOCK_TIME               PASSWORD DEFAULT
APP_PROFILE                    SESSIONS_PER_USER                KERNEL   DEFAULT
APP_PROFILE                    CPU_PER_CALL                     KERNEL   DEFAULT

控制密码过期的策略PASSWORD_LIFE_TIME为DEFAULT，应该没设过期限制，但帐号确实是过期了，
查阅官方材料，11g中确实有了改变，默认参数的值变了，具体如下


因此，为了安全起见，修改密码相关的资源限制为unlimit，密码永不过期，过期后锁定1分钟左右（0.0006天）
ALTER PROFILE APP_PROFILE limit PASSWORD_LIFE_TIME UNLIMITED;

ALTER PROFILE APP_PROFILE limit PASSWORD_LOCK_TIME 0.0006

able 2-1 Default Security Settings for Initialization and Profile Parameters

Setting	10g Default	11g Default
AUDIT_TRAIL	NONE	DB
O7_DICTIONARY_ACCESSIBILITY	FALSE	FALSE
PASSWORD_GRACE_TIME	UNLIMITED	7
PASSWORD_LOCK_TIME	UNLIMITED	1
FAILED_LOGIN_ATTEMPTS	10	10
PASSWORD_LIFE_TIME	UNLIMITED	180
PASSWORD_REUSE_MAX	UNLIMITED	UNLIMITED
PASSWORD_REUSE_TIME	UNLIMITED	UNLIMITED
REMOTE_OS_ROLES	FALSE	FALSE

http://docs.oracle.com/cd/E11882_01/server.112/e10575/tdpsg_install_config.htm#TDPSG60066