Security Services with Windows LAN Manager

When using Adaptive Server on Windows, you can enable the security services provided by Windows LAN Manager to authenticate users, clients, and servers to one another.

Establishing Secure Connections Between LAN Manager and Adaptive Server
Image shows the client application and Adaptive Server connecting to the Windows Event Manager.

Image shows the client application and Adaptive Server connecting to the Windows Event Manager.

You can use secure connection between LAN Manager and a server to provide a unified login to Adaptive Server. Through this login, the LAN Manager authenticates users once and does not require them to supply a name and password each time they log in to Adaptive Server.

The secure connection also can support one or more of these security services:

Message integrity to verify that data communications have not been modified
Replay detection to verify that data has not been intercepted by an intruder
Out-of-sequence check to verify the order of data communications

How Login Authentication Works
When a client validates the login with LAN Manager, Adaptive Server establishes a secure connection between itself and the client.
Administering Security Services Using LAN Manager
Administer the Adaptive Server unified login capability with LAN Manager.
Modify Configuration Files Required for a Unified Login
Configuration files are created during installation at a default location in the Sybase directory structure.
Identify Users and Servers to LAN Manager
The security administrator for LAN Manager must define principals (defined users) to the security mechanism. Use LAN Manager’s User Manager utility to identify all users for the system.
Configure Adaptive Server for LAN Manager Security
Adaptive Server uses several configuration parameters to administer unified login and security services through LAN Manager. To set these parameters, you must be a system security officer.
Add Logins to Support Unified Login
Consider whether to allow only users who are defined as valid logins to use Adaptive Server or to allow any user with the default login to use Adaptive Server.
Define the Connection to a Server for Security Services
Define the connection to a server for security services by specifying the principal name for Adaptive Server, network-based user authentication, and the name assigned to LAN Manager through the isql and bcp utilities.
Determining the Status of Security Services
Determine whether security services are enabled for the current session, by using show_sec_services
Configuration Parameters Used in Security Services
Unified login and security services use configuration parameters through LAN Manager that provide security checks.
Manage Login Security on an Windows Computer
You can use Adaptive Server security features alone or with Windows security features.