Results 1 to 5 of 5
  1. #1
    Join Date
    Dec 2002
    Posts
    1,245

    Unanswered: SQL Passwords ARE case-sensitive, right?

    I'm a bit flummoxed on this one (doesn't take much these days). We have a test SQL database and a prod SQL database configured with the same user name and a complex password.

    The password consists of letters and numbers, mixed upper and lower.

    What I am seeing, however, is that SQL will permit access even if the user gets the case wrong on the letters. One letter, two letters, all letters. It doesn't matter.

    I thought SQL passwords were case sensitive; was I wrong?

    Regards,

    hmscott

    Edit: I should add that I am running SQL 2000, SP3a (hotfix 0818) on Windows 2000 SP4 and that SQL is clustered on two servers in Active/Passive mode (this applies to both Test and Prod).
    Last edited by hmscott; 10-27-04 at 12:46.
    Have you hugged your backup today?

  2. #2
    Join Date
    Feb 2004
    Posts
    492
    afaik sql users and passwords are not case sensitive. I took a look at BOL: "Security Rules", it says a lot about passwords but mentions nothing about uppercase/lowercase mixing.

    Funny though: sp_password, Examples B: 'Xj7-IpSca'

    hmmz..
    Last edited by Kaiowas; 10-27-04 at 12:55. Reason: how about: 'Xj7-IpSca'

  3. #3
    Join Date
    Jan 2003
    Location
    Massachusetts
    Posts
    5,800
    Provided Answers: 11
    I believe the passwords are only case sensitive on servers with a case sensitive sort order (collation).

  4. #4
    Join Date
    Aug 2004
    Posts
    54
    I believe this is actually determined by the sort order defined on your sql server.

  5. #5
    Join Date
    Dec 2002
    Posts
    1,245
    okay...thanks for the replies. I thought maybe I was going crazy....


    Regards,

    hmscott
    Have you hugged your backup today?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •