What causes ORA-01017?

Pipeline uses a stale password after a credential rotation. The Oracle account is locked due to too many failed login attempts. Password has expired (Oracle enforces password expiry policies by default). Typo in the username or password in the connection string. Account does not exist in the target database

How do I fix ORA-01017?

Step 1: Check if the account is locked or password expired: `SELECT username, account_status, expiry_date FROM dba_users WHERE username = UPPER(' ');`.. Step 2: Unlock if locked: `ALTER USER pipeline_user ACCOUNT UNLOCK;`.. Step 3: Reset password if expired: `ALTER USER pipeline_user IDENTIFIED BY ' ';`.. Step 4: Update the password in the ADF linked service / Key Vault secret.. Step 5: Set PASSWORD_LIFE_TIME = UNLIMITED for service accounts: `ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED;` (or create a dedicated profile).

Critical severitycredentials

Oracle Database Error:
ORA-01017

What does this error mean?

The credentials supplied to Oracle are incorrect, the account is locked, or the password has expired.

Common causes

1Pipeline uses a stale password after a credential rotation
2The Oracle account is locked due to too many failed login attempts
3Password has expired (Oracle enforces password expiry policies by default)
4Typo in the username or password in the connection string
5Account does not exist in the target database

How to fix it

1Step 1: Check if the account is locked or password expired: `SELECT username, account_status, expiry_date FROM dba_users WHERE username = UPPER('<USER>');`.
2Step 2: Unlock if locked: `ALTER USER pipeline_user ACCOUNT UNLOCK;`.
3Step 3: Reset password if expired: `ALTER USER pipeline_user IDENTIFIED BY '<new_password>';`.
4Step 4: Update the password in the ADF linked service / Key Vault secret.
5Step 5: Set PASSWORD_LIFE_TIME = UNLIMITED for service accounts: `ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED;` (or create a dedicated profile).

Example log output

ORA-01017: invalid username/password; logon denied
ADF: UserErrorInvalidCredentials - Cannot connect to Oracle: ORA-01017

Frequently asked questions

How do I prevent password expiry from breaking pipelines?

Create a dedicated Oracle service account with a custom profile that sets PASSWORD_LIFE_TIME = UNLIMITED. Rotate via Key Vault and update all linked services from a single secret reference.

Source · docs.oracle.com/error-help/db/ora-01017