The integrated login feature allows you to maintain a single user ID and password for operating system and network logins, and database connections. To create an integrated login:
Enable the integrated login feature.
Create a database user to map the integrated login to (if one does not already exist).
Create an integrated login mapping between a Windows user or group profile and an existing database user. The Login Mappings folder in Sybase Central lists all users with integrated login permissions.
Connect from a client application and test the integrated login facility.
Integrated login capabilities are available for Windows-based database servers. Windows clients can use integrated logins to connect to a network server running on Windows.
An integrated login is a mapping from one or more Windows users or Windows user group profiles to an existing database user. A user who has successfully navigated the security for that user profile or group and logged in to a computer can connect to a database without providing an additional user ID or password.
To do this, the database must be configured to use integrated logins and a mapping must have been granted between the user or group profile used to log in to the computer or network, and a database user.
Using an integrated login is more convenient for the user and permits a single security system for database and network security. The advantages of an integrated login include:
Users do not need to type a user ID or password.
Users are authenticated by the operating system. A single system is used for database security and computer or network security.
Multiple user or group profiles can be mapped to a single database user ID.
The name and password used to login to the Windows computer do not have to match the database user ID and password.
Integrated logins offer the convenience of a single security system, but there are important security implications that database administrators should be familiar with. See Security concerns: Unrestricted database access and Security concerns: Copied database files.
Enable the integrated login feature
Create an integrated login
Revoke an integrated login permission
Connect to a database from a client application
Creating integrated logins for Windows user groups
Prevent Windows user groups members from connecting to a database
Network aspects of integrated logins
Creating a default integrated login user
Security concerns: Unrestricted database access
| Discuss this page in DocCommentXchange. Send feedback about this page using email. |
Copyright © 2009, iAnywhere Solutions, Inc. - SQL Anywhere 11.0.1 |