Post reply

Making password case insensitive

  • June 1, 2012 at 7:59 am

    #256928

    Is there a way to make the passwords case insensitive in SQL 2005?

    Microsoft SQL Server 2005 - 9.00.5057.00 SP4

    My password is like .. Alpha, alpha, ALPHA

    Server level collation: SQL_Latin1_General_CP1_CI_AS

  • June 1, 2012 at 8:26 am

    #1495893

    don't believe so; the hash(encrypted binary actually, i think?) of the password is compared to the hash that is stored in credential for the login associated in the sys.server_principals view, , and since the hash is different based on the case, then there's no way to make it case insensitive...it's not comparing string to string.

    Lowell

    --help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!

  • June 1, 2012 at 8:27 am

    #1495896

    There is no way to override that security feature. You could put an application between whatever program the users are using to log into SQL Server with, and have it convert the passwords to either all lower or all upper-case before interacting with SQL Server, but then all passwords would need to have been created in non-mixed case.

    _________________________________
    seth delconte
    http://sqlkeys.com

  • June 1, 2012 at 8:29 am

    #1495899

    You'd also have to store passwords as characters, likely plain text or ever so slightly obfuscated. If you do any conversion to binary, you can't have case insensitivity.

    A big security risk. People should understand, even as children, how to build a secure passphrase that is case sensitive.

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply