Case Sensitive Logon

With the release of oracle 11g database, oracle has added new feature regarding case sensitivity of password in the database. In lower versions of oracle database passwords are not case sensitive and user can specify their password in uppercase, lowercase or mixed, no matter how it was created.

New parameter SEC_CASE_SENSITIVE_LOGON enables or disables password case sensitivity in the database. It's boolean parameter and can have TRUE or FALSE as parameter value.

- TRUE - Database logon passwords are case sensitive.
- FALSE - Database logon passwords are not case sensitive.

SQL> show parameter sec_case_sensitive_logon

NAME TYPE VALUE
------------------------------------ ----------- ------------------------------
sec_case_sensitive_logon BOOLEAN TRUE


SQL>
SQL> conn hr/hr
ERROR:
ORA-01017: invalid username/password; logon denied


SQL> ALTER system SET SEC_CASE_SENSITIVE_LOGON=FALSE;

System altered.


SQL> conn hr/hr
Connected.