Using more than one security mechanism

If your replication system supports multiple security mechanisms, you may need to install more than one security mechanism on your Replication Server to ensure that both ends of each pathway can support the same mechanism. In this scenario, you can:

  1. Configure the Replication Server, for all routes, connections, and other pathways, using configure replication server. Make sure that the default security mechanism name is the first one listed under SECURITY in the libtcl.cfg file.

  2. Configure security for the individual pathways that use a different security mechanism. Make sure that the security mechanism is listed in libtcl.cfg. Table 8-7 lists pathways and the methods for securing them.

To find out the security mechanisms and supported security parameters of the Replication Server, use the admin security_property command. To find out the security mechanisms and current settings of a particular pathway, use the admin security_settings command. Refer to “Viewing information about security services” for more information.


Potential security issue

If different security mechanisms are used at the primary and replicate databases and Adaptive Server user names cannot be guaranteed unique at these sites, a potential security breach exists for request stored procedures.

If this scenario exists on your system, you can make sure that security is maintained by turning “off” the dsi_exec_proc parameter for the connection with the primary database. Executing alter connection and turning dsi_exec_proc “off” disables the Replication Server request-stored-procedures feature.

Here is the syntax:

alter connection to  data_server.database 
  set dsi_exec_request_sproc 'off'