Guidelines and Limitations for Maintenance User Security Configuration

There are several considerations for maintenance user security configuration.

Multiple connections – if there are connections from different databases in the same Adaptive Server to a Replication Server and these connections share the same Adaptive Server login for the maintenance user, turning on hide_maintuser_pwd for one connection affects all connections. Replication Server synchronizes any change of password across all the connections.
However, if there are connections from databases controlled by different Replication Servers, turning on hide_maintuser_pwd for one connection does not affect the other connections as Replication Server does not support the synchronization of maintenance user passwords across multiple Replication Servers.
Master database replication – Replication Server does not replicate the change in the maintenance user password when you enable maintenance user security with hide_maintuser_pwd. Each connection between a database and a Replication Server separately manages the random password change for the connection resulting from turning on hide_maintuser_pwd
Database restrictions – you cannot use hide_maintuser_pwd for non-Adaptive Server databases or the Replication Server ERSSD or RSSD.
External authentication methods – you cannot set hide_maintuser_pwd on if the Adaptive Server database uses external authentication methods such as LDAP, KERBEROS, or PAM for the maintenance user. Instead you must use ASE authentication.
To use ASE authentication for the maintenance user, or verify that ASE authentication is in use, execute the Adaptive Server alter login profile command and the modify authenticate with ASE clause and specify the maintenance user. If the command the is successful, you can configure hide_maintuser_pwd for the maintenance user.

See alter login in the Adaptive Server Enterprise Reference Manual: Commands and Changing Login Accounts in the Adaptive Server Enterprise Security Administration Guide.