Distributed Transactions

Distributed connections cannot respond to challenges, because when a distributed connection can be made cannot be predicted. Authentication on the remote servers must be done within the database. A new database, called sysusers, can be used to administer remote connections.

If PAM or an LDAP Authentication Support Module is enabled in the remote servers, the system administrator needs to enter authorized users in the sysauth table in the sysusers database for each remote server.

Database: sysusers

Table: sysauth

The sysauth table in the sysusers database has the following structure:

The table can contain multiple rows for a single user to authenticate for multiple servers and hosts.

The following example enables the server to accept distributed transactions from user user1, belonging to group group1, from database server server1, and from host host1.mycompany.com:

insert into sysauth values ("user1", "group1", "server1",
 "host1.mycompany.com");