The ORA-28011 Grace Period Warning seems to be handled poorly by DOA. It seems that the TOracleLogon component fails entirely and the TOracleSession component requires that the password be changed although it has not yet expired. Is this is recognized bug and is a fix planned?

The TOracleLogon handles ORA-28001 (the password has expired) and ORA-28002 (the password will expire within n days). ORA-28011 (the account will expire soon; change your password now) is not handled. I guess it should have been handled exactly the same as ORA28002. We will fix this for 4.0.2.