Oracle 11g Enable Case Sensitive Passwords For Improved Password Security

Prior to Oracle 11g, the passwords are not case sensitive. But in Oracle 11g we can enable case sensitive passwords by setting sec_case_sensitive_logon parameter value as TRUE. Once the parameter value set as true the user has to provide the password with proper case (upper, lower, mixed) as they created. The parameter can be altered dynamically.

SQL> connect / as sysdba
Connected.
SQL> show parameter sec_case_sensitive_logon;

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
sec_case_sensitive_logon             boolean     FALSE
SQL> create user test identified by TesT;

User created.

SQL> grant create session to test;

Grant succeeded.
SQL> connect test/test
Connected.

SQL> connect / as sysdba
Connected.
SQL> alter system set sec_case_sensitive_logon=true ;
System altered.

SQL> connect test/test
ERROR:
ORA-01017: invalid username/password; logon denied


Warning: You are no longer connected to ORACLE.

I have mentioned the password as TesT while creating the user. So I should give TesT as the password while connecting to Oracle.

SQL> connect test/TesT
Connected.
SQL> connect / as sysdba
Connected.
SQL> show parameter sec_case_sensitive_logon

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
sec_case_sensitive_logon             boolean     TRUE
SQL> alter system set sec_case_sensitive_logon=false;

System altered.

SQL> show parameter sec_case_sensitive_logon

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
sec_case_sensitive_logon             boolean     FALSE
DATA PUMP Reference Guide ….

0 comments:

Post a Comment

Related Posts Plugin for WordPress, Blogger...
 

dba topics. Copyright 2011-14 All Rights Reserved | Site Map | Contact | Disclaimer