At work we have 11g and the boss told me to make passwords case sensitive, but that's where I'm going, he doesn't want to set the SEC_CASE_SENSITIVE_LOGON to true in the production environment and he told me to find a way to make it through the profiles of the Oracle Database System or another way.
Is there actually a way to make case sensitive passwords through profile settings or another way?
What i believe is that if you don't switch the parameter of SEC_CASE_SENSITIVE_LOGON there is no way the database would let you make them, since this parameter is from the database system itself.
Also from what I've been searching the PROFILE doesn't have any of these functions.
Best Answer
Yep, it's really strange why SEC_CASE_SENSITIVE_LOGON should not be used for this if it's especially designed for the purpose. I can suggest in this case maybe just use some external authorization method like Oracle Identity Management, e.g.. It's much more complex and require additional infrastructure installed/configured and maintained, but users' credentials will be stored and controlled (including case-sensitive passwords) outside of the database and becomes independent on the database parameter value.