The error "DPY-3015: unsupported password verifier type" is now raised when

the database sends a password challenge with a verifier type that is not
recognized, instead of "ORA-01017: invalid username/password" (#26).

Author: anthony-tuininga

doc/src/release_notes.rst

@@ -18,6 +18,10 @@ Thin Mode Changes
 #)  The error `DPY-2030: LOB offset must be greater than zero` is now raised
     when the offset parameter to :func:`LOB.read()` is zero or negative
     (`issue 13 <https://github.com/oracle/python-oracledb/issues/13>`__).
+#)  The error `DPY-3015: unsupported password verifier type` is now raised when
+    the database sends a password challenge with a verifier type that is not
+    recognized, instead of `ORA-01017: invalid username/password`
+    (`issue 26 <https://github.com/oracle/python-oracledb/issues/26>`__).
 #)  Internally make use of the `TCP_NODELAY` socket option to remove delays
     in socket reads.
 

src/oracledb/errors.py

@@ -171,6 +171,7 @@ def _raise_from_string(exc_type: Exception, message: str) -> None:
 ERR_NCHAR_CS_NOT_SUPPORTED = 3012
 ERR_UNSUPPORTED_PYTHON_TYPE_FOR_VAR = 3013
 ERR_LOB_OF_WRONG_TYPE = 3014
+ERR_UNSUPPORTED_VERIFIER_TYPE = 3015
 
 # error numbers that result in DatabaseError
 ERR_TNS_ENTRY_NOT_FOUND = 4000
@@ -437,6 +438,8 @@ def _raise_from_string(exc_type: Exception, message: str) -> None:
             '{db_type_name}',
     ERR_UNSUPPORTED_VAR_SET:
             'variable of type {db_type_name} does not support being set',
+    ERR_UNSUPPORTED_VERIFIER_TYPE:
+            'unsupported password verifier type: 0x{verifier_type:x}',
     ERR_WALLET_FILE_MISSING:
             'cannot connect to database. Wallet file {name} was not found',
     ERR_WRONG_ARRAY_DEFINITION:

src/oracledb/impl/thin/constants.pxi

@@ -596,8 +596,9 @@ DEF TNS_RCAP_TTC_ZERO_COPY = 0x01
 DEF TNS_RCAP_TTC_32K = 0x04
 
 # verifier types
-DEF TNS_VERIFIER_TYPE_SHA1 = 45394
-DEF TNS_VERIFIER_TYPE_SSHA1 = 6949
+DEF TNS_VERIFIER_TYPE_11G_1 = 0xb152
+DEF TNS_VERIFIER_TYPE_11G_2 = 0x1b25
+DEF TNS_VERIFIER_TYPE_12C = 0x4815
 
 # other constants
 DEF TNS_MAX_SHORT_LENGTH = 252

src/oracledb/impl/thin/messages.pyx

@@ -1477,9 +1477,13 @@ cdef class AuthMessage(Message):
             if self.purity != 0:
                 num_pairs += 1
             self.auth_mode |= TNS_AUTH_MODE_WITH_PASSWORD
-            if self.verifier_type == TNS_VERIFIER_TYPE_SHA1 \
-                    or self.verifier_type == TNS_VERIFIER_TYPE_SSHA1:
+
+            if self.verifier_type in (TNS_VERIFIER_TYPE_11G_1,
+                                      TNS_VERIFIER_TYPE_11G_2):
                 verifier_11g = True
+            elif self.verifier_type != TNS_VERIFIER_TYPE_12C:
+                errors._raise_err(errors.ERR_UNSUPPORTED_VERIFIER_TYPE,
+                                  verifier_type=self.verifier_type)
             else:
                 num_pairs += 1
             self._generate_verifier(verifier_11g)