10g、11g口令檔案密碼大小寫敏感

perfychi發表於2013-04-15

一、11g口令檔案
11g 命令orapwd有引數ingnorecase,控制口令檔案密碼大小寫是否敏感:

[oracle@shanxi ~]$ orapwd
Usage: orapwd file= entries= force= ignorecase= nosysdba=

  where
    file - name of password file (required),
    password - password for SYS will be prompted if not specified at command line,
    entries - maximum number of distinct DBA (optional),
    force - whether to overwrite existing file (optional),
    ignorecase - passwords are case-insensitive (optional),
    nosysdba - whether to shut out the SYSDBA logon (optional Database Vault only).
   
  There must be no spaces around the equal-to (=) character.

(1)大小寫敏感: ignorecase = n(也是預設情況)
orapwd file=orapwPROD password=YITAi entries=3 force=y     nosysdba=n
等效於:
orapwd file=orapwPROD password=YITAi entries=3 force=y    ignorecase=n  nosysdba=n
[oracle@shanxi ~]$  sqlplus sys/yitai@221.XXX.XXX.XXX/PROD as sysdba

SQL*Plus: Release 11.2.0.1.0 Production on Mon Apr 15 11:47:39 2013

Copyright (c) 1982, 2009, Oracle.  All rights reserved.

ERROR:
ORA-01017: invalid username/password; logon denied


Enter user-name:


[oracle@shanxi ~]$  sqlplus sys/YITAi@221.XXX.XXX.XXX/PROD as sysdba      

SQL*Plus: Release 11.2.0.1.0 Production on Mon Apr 15 11:48:13 2013

Copyright (c) 1982, 2009, Oracle.  All rights reserved.


Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP, Data Mining,
Oracle Database Vault and Real Application Testing options

11:48:13 SQL[ SYS ] >

也就是11g預設情況下,口令檔案密碼是大小寫敏感的。


(2) 大小寫不敏感: ignorecase=y
必須顯式控制,因為預設是ingnorecase=n

[oracle@shanxi ~]$  sqlplus sys/yitai@221.204.237.110/PROD as sysdba

SQL*Plus: Release 11.2.0.1.0 Production on Mon Apr 15 11:51:16 2013

Copyright (c) 1982, 2009, Oracle.  All rights reserved.


Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP, Data Mining,
Oracle Database Vault and Real Application Testing options

11:51:16 SQL[ SYS ] >


[oracle@shanxi ~]$  sqlplus sys/YITAi@221.XXX.XXX.XXX/PROD as sysdba    

SQL*Plus: Release 11.2.0.1.0 Production on Mon Apr 15 11:51:46 2013

Copyright (c) 1982, 2009, Oracle.  All rights reserved.


Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP, Data Mining,
Oracle Database Vault and Real Application Testing options

11:51:47 SQL[ SYS ] >


(2)10g:

10g 命令orapwd沒有可以控制大小寫敏感的引數,因此口令檔案密碼大小寫是不敏感的:

[oracle@center-rac1 ~]$orapwd
Usage: orapwd file= password= entries= force= nosysdba=

  where
    file - name of password file (mand),
    password - password for SYS (mand),
    entries - maximum number of distinct DBA,
    force - whether to overwrite existing file (opt),
    nosysdba - whether to shut out the SYSDBA logon (opt for Database Vault only).
  There are no spaces around the equal-to (=) character

[oracle@center-rac1 ~]$sqlplus sys/YITAI@192.XXX.XXX.XXX/wxxridx as sysdba

SQL*Plus: Release 10.2.0.3.0 - Production on Mon Apr 15 11:56:44 2013

Copyright (c) 1982, 2006, Oracle.  All Rights Reserved.


Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options


[oracle@center-rac1 ~]$sqlplus sys/yitai@192.XXX.XXX.XXX/wxxridx as sysdba

SQL*Plus: Release 10.2.0.3.0 - Production on Mon Apr 15 11:57:53 2013

Copyright (c) 1982, 2006, Oracle.  All Rights Reserved.


Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.5.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL>     
SQL>


10g中,沒有大小寫敏感引數控制,所以密碼無論大小寫都能登陸。




來自 “ ITPUB部落格 ” ,連結:http://blog.itpub.net/27042095/viewspace-758479/,如需轉載,請註明出處,否則將追究法律責任。

相關文章