Re: Increase Security
Posted in 1995
Andrew Beattie — — source: Informix-list mailing list archive (1991-1998)
>Please could you enlighten me about these techniques for enforcing the >access controls based on which application is doing the access Excuse me if I'm speaking out of turn, but i thought that this problem had been solved (at least in theory) as follows: Consider a remote user on a PC. The user uses the application to set his password on the Informix server. The application encrypts the password before passing it to the server, (for further encription by the unix password mechanism). When he uses the application, he uses his password again, and the application encrypts it again to use to unlock the database. The user is unable to go direct to the database, because his real password is unknown to him. Andrew