Notes on Oracle password expiry

Closes #2491

diff --git a/docs/markdown/authoritative/backend-generic-oracle.md b/docs/markdown/authoritative/backend-generic-oracle.md
index a7428879e6569e917d25b47e78db14cdf555eddf..d6999965128a94848de91316f12ad8cf4e8696d0 100644 (file)
--- a/docs/markdown/authoritative/backend-generic-oracle.md
+++ b/docs/markdown/authoritative/backend-generic-oracle.md
@@ -37,3 +37,11 @@ in `/etc/tnsnames.ora`.
 
 ## `goracle-dnssec`
 Enable DNSSEC processing for this backend. Default=no.
+
+# Caveats
+## Password Expiry
+When your password is about to expire, and logging into oracle warns about this,
+the Generic Oracle backend can no longer login, and will a OCILogin2 warning.
+
+To work around this, either update the password in time or remove expiration
+from the account used.