Security concerns: Temporary public options for added security

Setting the value of the login_mode option for a given database to allow a combination of Standard, Integrated, Kerberos, and LDAPUA logins using the SET OPTION statement permanently enables the specified types of logins for that database. For example, the following statement permanently enables standard and integrated logins:

SET OPTION PUBLIC.login_mode = 'Standard,Integrated';

If the database is shut down and restarted, the option value remains the same and integrated logins remain enabled.

Setting the login_mode option using SET TEMPORARY OPTION still allows user access via integrated logins, but only until the database is shut down. The following statement changes the option value temporarily:

SET TEMPORARY OPTION PUBLIC.login_mode = 'Standard,Integrated';

If the permanent option value is Standard, the database will revert to that value when it is shut down.

Setting temporary public options can provide additional security for your database. When you add integrated, Kerberos, or LDAPUA logins to your database, the database relies on the security of the operating system on which it is running. If the database is copied to another computer, access to the database reverts to the SAP Sybase IQ security model.