Why are Encrypted Passwords not Rehashed During a Domain Upgrade? Should this be an Enhancement? (Doc ID 1531376.1)

Last updated on AUGUST 07, 2023

Applies to:

Goal

When a domain is upgraded, passwords for external LDAP providers, JDBC connection pools, keystores, truststores, and so on, are not changed. This includes upgrades which include a change to the default encryption algorithm (for example, when DES was replaced by AES). Why is there not a separate module which can re-encrypt such passwords automatically, and why is the upgrade utility incapable of doing this by itself?

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.