Extended encryption login

(ESD #2) The OCS API supports the public-key encrypted password handshake between Open Client and Open Server, making this functionality available for implementation in ECDA products.

This is the process that occurs when any Open Client-based application, such as isql, issues a public-key-encrypted login request to an Open Server application, such as ECDA and DirectConnect server:

  1. The server sends a public key to the client, and waits for the client to send back the encrypted password.

  2. When the DirectConnect server receives the encrypted password, it decrypts the password to plain text.

  3. The DirectConnect server sends the plain text password to a remote server or database for authentication.

To request an extended encrypted login, use the isql -X command. In this example, “testsrv” is the DirectConnect service name, “tester” is the user name, “sybase” is the password, and -X is the option for the encrypted login request:

isql -Stestsrv -Utester -Psybase -X