sp_helpmaplogin  System table changes

Chapter 7: Security Changes

New global variable @@authmech

Adaptive Server version 12.5.2 includes the new global variable @@authmech, which is a read-only global variable, set to the mechanism used to authenticate the user.

For example, consider Adaptive Server is enabled for PAM user authentication with failover (enable pam user auth = 1), and Joe is an external user with ANY authentication, and LDAP user authentication is disabled. When Joe logs in, Adaptive Server attempts to authenticate Joe, using PAM user authentication.

If Joe fails authentication as a user in PAM, Adaptive Server authenticates Joe using ASE authentication (syslogins), and if that succeeds, he logs in successfully.

The @@authmech global variable now has this value.:

1> select @@authmech
2> go

----------------------------------
ase

Now consider Adaptive Server is configured for strict PAM user authentication (enable pam user auth = 2) and Joe is added as a valid user in PAM. Now, when Joe logs in, the value for @@authmech is:

1> select @@authmech
2> go

----------------------------------
pam




Copyright © 2004. Sybase Inc. All rights reserved. System table changes

View this book as PDF