Adaptive Server, when it is started, determines the set of security mechanisms it supports. (See “Determining security mechanisms to support”. From the list of security mechanisms that Adaptive Server supports, it must choose the one to be used for a particular client.
If the client specifies a security mechanism (for example with the -Z option of isql_dce), Adaptive Server uses that security mechanism. Otherwise, it uses the first security mechanism listed in the libtcl.cfg file.