DEV Community

Vahid Yousefzadeh
Vahid Yousefzadeh

Posted on

Oracle 21c — Removal of IGNORECASE and SEC_CASE_SENSITIVE_LOGON Parameters

#oracle #devops #linux #database

Starting from Oracle 21c, all passwords stored in the password file are case-sensitive.
In previous versions, this behavior could be disabled using the IGNORECASE parameter in the orapwd command.

— Oracle 19c:

[oracle@linux7 dbs]$ orapwd file=/oracle19c/home/dbs/orapwtajmifullssd sys=Y force=Y format=12 ignorecase=Y password=EST_est_123 [oracle@linux7 dbs]$ sqlplus “sys/est_est_123@linux7:1521/pdb1 as sysdba” SQL*Plus: Release 19.0.0.0.0 – Production on Thu Nov 11 08:59:55 2021 Version 19.11.0.0.0 Copyright (c) 1982, 2020, Oracle. All rights reserved. Connected to: Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 – Production Version 19.11.0.0.0 SQL>
Enter fullscreen mode Exit fullscreen mode

When you attempt to use the IGNORECASE parameter in Oracle 21c:

[oracle@linux7 dbs]$ orapwd file=/oracle21c/base/dbs/orapwdb21c sys=Y force=Y format=12 ignorecase=Y password=EST_est_123 Usage 1: orapwd file=<fname> force={y|n} asm={y|n} dbuniquename=<dbname> format={12|12.2} delete={y|n} input_file=<input-fname> 'sys={y | password | external(<sys-external-name>) | global(<sys-directory-DN>)}' 'sysbackup={y | password | external(<sysbackup-external-name>) | global(<sysbackup-directory-DN>)}' 'sysdg={y | password | external(<sysdg-external-name>) | global(<sysdg-directory-DN>)}' 'syskm={y | password | external(<syskm-external-name>) | global(<syskm-directory-DN>)}'
Enter fullscreen mode Exit fullscreen mode

So you must now create the password file without IGNORECASE:

[oracle@linux7 dbs]$ orapwd file=/oracle21c/base/dbs/orapwdb21c sys=Y force=Y format=12 password=EST_est_123
Enter fullscreen mode Exit fullscreen mode

Now, connecting with the correct case password works:

[oracle@linux7 dbs]$ sqlplus "sys/EST_est_123@192.168.56.20:1521/pdb1 as sysdba" SQL*Plus: Release 21.0.0.0.0 – Production on Thu Nov 11 08:53:33 2021 Version 21.3.0.0.0 SQL> [oracle@linux7 dbs]$ sqlplus "sys/est_est_123@192.168.56.20:1521/pdb1 as sysdba" SQL*Plus: Release 21.0.0.0.0 – Production on Thu Nov 11 08:54:09 2021 Version 21.3.0.0.0 Copyright (c) 1982, 2021, Oracle. All rights reserved. ORA-01017: invalid username/password; logon denied Enter user-name:
Enter fullscreen mode Exit fullscreen mode

Additionally, the parameter SEC_CASE_SENSITIVE_LOGON, which had already been deprecated in earlier releases, has been completely removed (desupported) in Oracle 21c:

SQL> alter system set SEC_CASE_SENSITIVE_LOGON=false; ORA-25138: SEC_CASE_SENSITIVE_LOGON initialization parameter has been made obsolete
Enter fullscreen mode Exit fullscreen mode

Top comments (0)