Oracle11gR2--SEC_CASE_SENSITIVE_LOGON参数解析

在Oracle的11g之前的版本中密码是不区分大小写的（使用双引号强制除外）。

在Oracle的11g以及以后的版本中对此有所增强。从此密码有了大小写的区分。

这个大小写敏感特性是通过SEC_CASE_SENSITIVE_LOGON参数来控制的。

1.Oracle 11gR2官方文档解释:

http://download.oracle.com/docs/cd/E11882_01/server.112/e10820/initparams218.htm#REFRN10299

SEC_CASE_SENSITIVE_LOGON
Property	Description
Parameter type	Boolean
Default value	true
Modifiable	ALTER SYSTEM
Range of values	true | false
Basic	No

SEC_CASE_SENSITIVE_LOGON enables or disables password case sensitivity in the database.
Values:
true
Database logon passwords are case sensitive.
false
Database logon passwords are not case sensitive.

2.测试一下

[oracle@localhost ~]$ sqlplus / as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Mon Feb 12 16:14:53 2018

Copyright (c) 1982, 2013, Oracle.  All rights reserved.


Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

#创建用n1 密码 ni
SQL> create use n1  identified by n1;
SQL> grant connect,resource to n1;

#查看sec_case_sensitive_logon 参数设置 默认是 TRUE 即开启登陆大小写敏感！
SQL> show parameter sec

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
db_securefile                        string      PERMITTED
optimizer_secure_view_merging        boolean     TRUE
sec_case_sensitive_logon             boolean     TRUE
sec_max_failed_login_attempts        integer     10
sec_protocol_error_further_action    string      CONTINUE
sec_protocol_error_trace_action      string      TRACE
sec_return_server_release_banner     boolean     FALSE
sql92_security                       boolean     FALSE

#使用大写的密码登陆 登陆失败
SQL> conn  n1/N1
ERROR:
ORA-01017: invalid username/password; logon denied


Warning: You are no longer connected to ORACLE.
SQL> conn / as sysdba
Connected.


#动态修改系统参数 为 false 不验证大小写
SQL> alter system set sec_case_sensitive_logon = false;

System altered.

#再次使用大写密码登陆 成功
SQL> conn n1/N1
Connected.

3.延伸测试(sec_case_sensitive_logon 参数只是控制登陆时是否校验大小写,密码还是会进按照世纪的大小写进行存储的！)

SQL> show  parameter sec_case_sensitive_logon

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
sec_case_sensitive_logon             boolean     FALSE


#创建用户 密码包含大小写
SQL> create user test11 identified by testAbcD ;

User created.

SQL> grant  connect to test11;

Grant succeeded.


#测试链接 大小写不敏感
SQL> conn  test11/testabcd
Connected.
SQL> conn  / as sysdba
Connected.

#修改为大小写敏感
SQL> alter system set sec_case_sensitive_logon = true;

System altered.

#用错误的密码无法登陆
SQL> conn  test11/testabcd
ERROR:
ORA-01017: invalid username/password; logon denied


Warning: You are no longer connected to ORACLE.

#包含大小写的密码,登陆成功！
SQL> conn test11/testAbcD
Connected.
SQL>