Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> Case Sensitivity and Passwords
        
(Message started by: Pete Finnigan on Jan 24^th, 2008, 7:09pm)

Title: Case Sensitivity and Passwords
Post by Pete Finnigan on Jan 24^th, 2008, 7:09pm

Hi,

I'm in the process of implementing password management. One requirement is that a password MUST consist of AT LEAST 1 lowercase letter. I created a boolean function to do this(TRUE if success). This is included in the password verification function set in my user profile. Briefly, I've executed the following:-

alter user john profile PassVerif_PROF;

alter user john identified by abcd;

My checks revealed that abcd gets automatically converted to ABCD. As a result, my function always returns FALSE.

Is it possible to make Oracle case-sensitive so that a password abcd gets interpreted as abcd and NOT ABCD ?? Is there a database setting to do this? Is it possible ?

Title: Re: Case Sensitivity and Passwords
Post by Pete Finnigan on Jan 25^th, 2008, 12:30am

This was an Oracle 11g enhancement. Since it has only been out a few months, I'd guess you aren't on that version.