Understanding Default Profiles

All Oracle users created in an instance are assigned a default profile.

Oracle Database Version	Default Profile Values
Oracle 11g or higher	PASSWORD_LIFE_TIME: 180 PASSWORD_LOCK_TIME: 1 PASSWORD_GRACE_TIME: 7

For pre-11g Oracle releases, the default profile did not specify a PASSWORD_LIFE_TIME limit. As such, by default, the password for a given Oracle user never expired. PASSWORD_LOCK_TIME and PASSWORD_GRACE_TIME were also unlimited. For 11g or higher, the default profile has a PASSWORD_LIFE_TIME of 180 days. PASSWORD_LOCK_TIME and PASSWORD_GRACE_TIME also have limits.

For a PeopleSoft installation on the Oracle platform, several Oracle user IDs are created during the installation. Those Oracle users are:

• Access ID (default is SYSADM)

• Connect ID (default is people)

• PS (owns the PSDBOWNER table)

The access ID is the schema owner for all database objects related to a specific PeopleSoft application installation. The access ID and access ID password are stored and encrypted in the PeopleSoft security table PSACCESSPROFILE.

/*DESCR PSACCESSPROFILE*/
Name                 Null       Type          
------------------   --------   ------------- 
SYMBOLICID           NOT NULL   VARCHAR2(8)   
STM_ACCESS_ID        NOT NULL   VARCHAR2(254) 
STM_ACCESS_PSWD      NOT NULL   VARCHAR2(254) 
STM_ACCESS_PART1     NOT NULL   VARCHAR2(128) 
STM_ACCESS_PART2     NOT NULL   VARCHAR2(128) 
ENCRYPTED            NOT NULL   NUMBER(38)    
STM_ENCRYPTION_VER   NOT NULL   NUMBER(38)    
VERSION              NOT NULL   NUMBER(38)    

/*SELECT  * from PSACCESSPROFILE*/
SYMBOLIC ID          STM_ACCESS_ID                             
<SYMBOLIC_ID_NAME>   mvsrhK/De0GTCI/sNISVxKkeilFx23SYSsZ2Mlxj

STM_ACCESS_PSWD                             STM_ACCESS_PART1
mvsrhK/De0GTCI/sNISVxKkeilFx23SYSsZ2Mlxj    7ZP4zFqIGDc=

STM_ACCESS_PART2      ENCRYPTED        STM_ENCRYPTED_VER    VERSION	
O2/Cz9HFQZ4=          1                1                    1040

The connect ID is a pseudo logon which allows PeopleSoft to associate multiple PeopleSoft user IDs to the same connect ID. The connect ID has the minimum privileges required to connect to the database (only SELECT privileges on specific PeopleTools tables). After a connection has been established using the connect ID, PeopleSoft security uses the PeopleSoft user ID to control access to objects in the database. The PeopleSoft signon process validates the connect ID on the server, rather than the user ID. The connect ID simplifies database security maintenance, as you don't need to maintain access for all PeopleSoft users, just for the connect ID.

The PS ID is used once, during PeopleSoft database creation, to create the PSDBOWNER table. Once this table has been created, read access and write privileges are made public to everyone, then the PS user ID privileges are revoked.