Re: nopassword-Option with Informix OleDb
Posted in 2004
Topics: Security, Permissions & Auditing
--0__=09BBE4C6DFC5990D8f9e8a93df938690918c09BBE4C6DFC5990D Content-type: multipart/alternative; Boundary="1__=09BBE4C6DFC5990D8f9e8a93df938690918c09BBE4C6DFC5990D" --1__=09BBE4C6DFC5990D8f9e8a93df938690918c09BBE4C6DFC5990D Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: quoted-printable Anytime username is specified in the connection, the password too has t= o be mentioned. If just one of them is specified, the connection will get rejected at the client layer itself. Hence it will not be logged in online.log. When both are supplied and the values are authenticated at the server and hence the attempt will be logged in online.log In case you have an entry in .rhosts & hosts.equiv, u needn't specify username or password. You will get connected as the user you have logge= d in on your client machine as. Regards, Kanchana Padmanabhan Software Engineer R&D - IBM Data Management Group 11200 Lakeview, Lenexa, KS 66219 Tel: 913 599 8674 t/l : 337 8674 Fax: 913 599 7260 = Daniel Voelkel = <daniel.voelkel.N = G@gmx.net> = To Sent by: informix-list@iiug.org = owner-informix-li = cc st@iiug.org = Subj= ect nopassword-Option with Informix = 03/12/2004 04:39 OleDb = AM = = = Please respond to = Daniel Voelkel = = = Hi, when using OleDB to access an informixdatabase, I can set an option "no= password" which should allow me to access the db with only my username.= Therefor there my hostname must be listet in my .rhost or in the /etc/hosts.equiv file. This works fine for me with f.i. the Borland BDE= , but not with the OleDB-driver. With oledb I get an 952 (wrong password)= . Interersting is, that this "missed try" is not logged in the online.log= of the server. When is try to access with a really wrong password, then= the try is logged in online.log. It seems that the driver does'nt try t= o connect the server with my account, when I use the "no password"-option= . Did anyone expect the same problem, or does anybody have a hint for me?= Thanks in advance, Daniel = --1__=09BBE4C6DFC5990D8f9e8a93df938690918c09BBE4C6DFC5990D Content-type: text/html; charset=US-ASCII Content-Disposition: inline Content-transfer-encoding: quoted-printable <html><body> <p>Anytime username is specified in the connection, the password too ha= s to be mentioned. If just one of them is specified, the connection wil= l get rejected at the client layer itself. Hence it will not be <br> logged in online.log. When both are supplied and the values are authent= icated at the server and hence the attempt will be logged in online.log= <br> <br> In case you have an entry in .rhosts & hosts.equiv, u needn't speci= fy username or password. You will get connected as the user you have lo= gged in on your client machine as.<br> <br> Regards,<br> Kanchana Padmanabhan<br> <br> Software Engineer<br> R&D - IBM Data Management Group<br> 11200 Lakeview, Lenexa, KS 66219<br> Tel: 913 599 8674 t/l : 337 8674 Fax: 913 599 7260 <br> <br> <img src=3D"cid:10__=3D09BBE4C6DFC5990D8f9e8a93df938@us.ibm.com" width=3D= "16" height=3D"16" alt=3D"Inactive hide details for Daniel Voelkel <= daniel.voelkel.NG@gmx.net>">Daniel Voelkel <daniel.voelkel.NG@gmx= .net><br> <br> <br> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td style=3D"background-image:url(cid:20__=3D09BBE4C= 6DFC5990D8f9e8a93df938@us.ibm.com); background-repeat: no-repeat; " wid= th=3D"40%"> <ul> <ul> <ul> <ul><b><font size=3D"2">Daniel Voelkel <daniel.voelkel.NG@gmx.net>= ;</font></b><font size=3D"2"> </font><br> <font size=3D"2">Sent by: owner-informix-list@iiug.org</font> <p><font size=3D"2">03/12/2004 04:39 AM</font> <table border=3D"1"> <tr valign=3D"top"><td width=3D"168" bgcolor=3D"#FFFFFF"><div align=3D"= center"><font size=3D"2">Please respond to<br> Daniel Voelkel</font></div></td></tr> </table> </ul> </ul> </ul> </ul> </td><td width=3D"60%"> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3= 0__=3D09BBE4C6DFC5990D8f9e8a93df938@us.ibm.com" border=3D"0" height=3D"= 1" width=3D"58" alt=3D""><br> <div align=3D"right"><font size=3D"2">To</font></div></td><td width=3D"= 100%"><img src=3D"cid:30__=3D09BBE4C6DFC5990D8f9e8a93df938@us.ibm.com" = border=3D"0" height=3D"1" width=3D"1" alt=3D""><br> <font size=3D"2">informix-list@iiug.org</font></td></tr> <tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3= 0__=3D09BBE4C6DFC5990D8f9e8a93df938@us.ibm.com" border=3D"0" height=3D"= 1" width=3D"58" alt=3D""><br> <div align=3D"right"><font size=3D"2">cc</font></div></td><td width=3D"= 100%"><img src=3D"cid:30__=3D09BBE4C6DFC5990D8f9e8a93df938@us.ibm.com" = border=3D"0" height=3D"1" width=3D"1" alt=3D""><br> </td></tr> <tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3= 0__=3D09BBE4C6DFC5990D8f9e8a93df938@us.ibm.com" border=3D"0" height=3D"= 1" width=3D"58" alt=3D""><br> <div align=3D"right"><font size=3D"2">Subject</font></div></td><td widt= h=3D"100%"><img src=3D"cid:30__=3D09BBE4C6DFC5990D8f9e8a93df938@us.ibm.= com" border=3D"0" height=3D"1" width=3D"1" alt=3D""><br> <font size=3D"2">nopassword-Opti
Kanchana Padmanabhan wrote: > Anytime username is specified in the connection, the password too has t= > o be > mentioned. If just one of them is specified, the connection will get > rejected at the client layer itself. Hence it will not be > logged in online.log. When both are supplied and the values are > authenticated at the server and hence the attempt will be logged in > online.log > > In case you have an entry in .rhosts & hosts.equiv, u needn't specify > username or password. You will get connected as the user you have logge= > d in > on your client machine as. > > Regards, > Kanchana Padmanabhan Hi, Thanks for the quick reply. With your answer I understand what is happening here. This feature must be new with Client-SDK 2.81. The driver in 2.7X works another way. If you logon with 2.7X with only a username the server accepts the connection if my host is listet in the .rhosts or the hosts.equiv. I need to specify the user which is connecting, because I'm developing a couple of 3-tier-application. The only host which connects directly to the db-server is the "application-server". If you connect with the user logged in on this machine, it will always log in with an administrative account. I don't have a chance to use user-specific roles and logging mechanisms. So this new feature does'nt help me in any way. Is there a way to tell the driver to use a specified user without a password, and to authenticate with the .rhost? Perhaps a registry-key? Thanks in advance for your help. Daniel