How does informix know who is connecting?
Posted in 1999
Topics: Security, Permissions & Auditing
How does informix know who is connecting, to it. If the database uses a users unix environmenmt login and password could you please tell me what they are. Is this the only way to allow connections, there are no internal user profiles, like the other database has, correct? Thanks david.tamburin@protegrity.com david Tamburin
David Tamburin wrote: > > How does informix know who is connecting, to it. If the database uses a > users unix environmenmt login and password could you please tell me what > they are. Is this the only way to allow connections, there are no internal > user profiles, like the other database has, correct? I do not know what you want to know. Tell you what what are? Informix, by default, uses the client's local OS login id and login permissions to control access. In other words if you have a login on the server and the client machine from which you are attaching is a trusted host, or trusted for this user in $HOME/.rhosts, then the user can connect to the engine. On the other issue of user profiles. Yes Informix does indeed keep user profiles, in each database, in the table sysuser, which indicates whether that username has connect, resource, dba, etc priveleges for access to that particular database. Since one Informix instance manages multiple databases this makes sense. In addition there are users level privelege checks at the table, fragment, and column levels for tables and execute privelege for stored procedures. Is there another way to connect? Informix does support the USER/PASSWORD clauses of the CONNECT TO statement which allows you to specify which user an application is logging into the server as and its password so that one can have a different username and password on the client than on the remote or run the client as the same priveleged user for many real users embedding the login and (a perhaps encrypted) password in the application without the user knowing what those are so that ONLY the application can get access to the database. Art S. Kagel