Last updated: 26 September 2012
Banner password expiration and account locking
The purpose of this document is to inform users about what to expect when their Banner (or Oracle) passwords have expired, or are about to expire. As a security precaution, Banner passwords must be changed every 90 days.
Note: Some applications (such as MS-Access) may not display the explicit Oracle error messages described in this document. If you are having trouble logging in to a Banner-related application and you are not sure why, try logging into Internet Native Banner to see if the problem is related to an expired password or locked account.
Password is about to expire
When your account is created, your password is set to expire 90 days from that time. The first time you try to access Banner after 76 days have elapsed (2 weeks before the 90 days), a 14 day grace period will begin. It does not matter how much time passes between the end of the 76 days and this first login attempt. So, if you are on vacation or sabbatical, and your password expires during that time, the 14 day grace period will begin the first time you login upon returning.
During this grace period, when you access the Banner database, depending on which application you are using, you may see the following message: "ORA-28002: the password will expire within N days". If you receive this message, and click OK, your login will complete successfully. During this time, you can use the GUAPSWD form in Banner to change your password.
Password has expired
Your password may expire for one of two reasons:
- A security administrator manually expired your password, or
- You were notified that your password would expire, but you did not change your password during the 14 day grace period (described above).
When your password expires, you will be forced to change it. When you try to access the Banner database (whether you are using Banner, or another application, such as MS-Access, SQL*Plus, etc.), you will see a dialog that will guide you in changing your password. (Banner users will first receive the following message: "ORA-28001: the password has expired", and will need to click OK to see the dialog). If you cancel out of the change password dialog, you will not be able to log in. However, you will still have the opportunity to change the password the next time you try to login to Banner.
For Banner password complexity requirements and guidelines, please refer to the Accounts page on the University Technology Services website.
Account is locked
Your Banner account may become locked for any of the following reasons:
- Your account will be locked automatically after 3 failed login attempts. In this case, the account will remain locked for 3 days, after which it will be unlocked automatically.
- Your account will also be locked if it is not used for 90 days. Accounts locked for this reason will remain locked until manually unlocked by the security administrator.
- A security administrator may also manually lock accounts in extreme circumstances to prevent potential security breaches. Accounts locked for this reason will remain locked until manually unlocked by the security administrator.
If your account is locked, then when you access the Banner database, you will receive the message "ORA-28000: the account is locked", and you will not be able to log in. If your account is locked, you will need to have it unlocked. A security administrator will give you a new password and set it to be expired. You will need to come to 220 Dodge Hall to pick up the new password. After you have received the new password, you can refer to the above paragraph on expired passwords.