Extended encryption login

NoteFor all Server Options only.

(ESD #2) The OCS API provides the ability to support the public key encrypted password handshake between the Open Client™ and the Open Server™, making this functionality available for implementation in Enterprise Connect Data Access products.

Following is the process that occurs when any Open Client-based application (such as isql) issues a public key encrypted login request to an Open Server application (such as ECDA and the DirectConnect server):

  1. The server sends a public key to the client, and waits for the client to send back the encrypted password.

  2. When the DirectConnect server receives the encrypted password, it decrypts the password to plain text.

  3. The DirectConnect server sends the plain text password to a remote server or database for authentication.

To request an extended encrypted login, use the isql -X command. In the following example, “testsrv” is a DirectConnect service name, “tester” is a user name, “sybase” is a password, and -X is the option for the encrypted login request:

isql -Stestsrv -Utester -Psybase -X