PASSWORD_SECURITY_POLICY (MAX_FAILED_LOGIN_ATTEMPTS) also applies to SYS
Details
| Detail name | Value |
|---|---|
| Changelog Number | 11628 |
| Type | Bug |
| Status | Resolved |
| Affected Versions | |
| Fix Versions | Exasol 7.1.16, Exasol 8.9.0 |
| Resolution Date | 2022-11-24 |
Description
The PASSWORD_SECURITY_POLICY parameter MAX_FAILED_LOGIN_ATTEMPTS also applies to SYS. This can lead to SYS being locked if the configured maximum number of failed login attempts is exceeded.
(!)We advise configuring a sufficiently complex password for SYS and setting an IP filter in order to protect SYS from brute-force attacks. SYS shall not be used for day-to-day operations but be reserved for emergencies if user accounts of database administrators are not accessible.
Workaround
There is no workaround
Fix
Password Security Policies do not apply to SYS. SYS will not be locked after exceeding a configured maximum number of failed login attempts.
Changed behavior
A Password Security Policy's maximum number of failed logins is no longer applied to SYS.
