login_mode option [database]

Controls the use of integrated and Kerberos logins for the database.

Allowed values

One or more of: Standard, Integrated, Kerberos, Mixed (deprecated)

Default

Standard

Scope

Can be set for the PUBLIC group only. DBA authority required. Takes effect immediately.

Remarks

This option specifies whether standard, integrated, and Kerberos logins are permitted. One or more of the following login modes are accepted (the values are case insensitive):

  • Standard   Standard logins are permitted. This is the default setting. Standard connection logins must supply both a user ID and password, and do not use the Integrated or Kerberos connection parameters.

  • Integrated   Integrated logins are permitted.

  • Kerberos   Kerberos logins are permitted.

  • Mixed (deprecated)   This is equivalent to specifying Standard,Integrated.

If you specify multiple login modes, the database server allows all the specified modes.

Caution

Setting the login_mode database option to not allow Standard logins restricts connections to only those users or groups who have been granted an integrated or Kerberos login mapping. Attempting to connect with a user ID and password generates an error. The only exceptions to this are users with DBA authority.

You can specify multiple values in a comma-separated list. This list cannot contain white space. For example, the following setting allows both standard and integrated logins:

SET OPTION PUBLIC.login_mode = 'Standard,Integrated';

If a database file is not secured and can be copied by unauthorized users, the temporary public login_mode option should be used (both for integrated and Kerberos logins). This way, integrated and Kerberos logins are not supported by default if the file is copied.

See also
Example

Enable only integrated logins (standard logins and Kerberos logins fail):

SET OPTION PUBLIC.login_mode = 'Integrated';

Enable standard and Kerberos logins (integrated logins fail):

SET OPTION PUBLIC.login_mode = 'Standard,Kerberos';

Enable standard, integrated, and Kerberos logins:

SET OPTION PUBLIC.login_mode = 'Standard,Integrated,Kerberos';