skip to main content
Configuring Security for OpenAccess SDK : Configuring OpenAccess SDK security : Configuring data source logon
 

Configuring data source logon

A client application establishing a connection to the data source must provide a valid data source user ID and password when DataSourceLogonMethod=DBMSLogon(UID,PWD) or DataSourceLogonMethod=DBMSLogon(DBUID,DBPWD). This information is passed to the IP for use in authenticating access to the data source.
Depending on how the service is configured, the OpenAccess SDK Server may require the OpenAccess SDK Client to provide two user IDs and passwords. OpenAccess SDK Clients typically provide user ID and password information using the UID and PWD attributes in a connection string (ODBC and ADO) or a connection URL (JDBC).
To avoid possible conflict with a standard keyword pair (UID,PWD) with two sets of values, make sure that you set non-conflicting values for the ServiceAuthMethods and DataSourceLogonMethod attributes. For example, when ServiceAuthMethods=OSLogon(UID,PWD) and DataSourceLogonMethod=DBMSLogon(DBUID,DBPWD), the OpenAccess SDK Client must provide the operating system user and password using the keywords UID and PWD and the data source user and password must be specified using the DBUID and DBPWD keywords. The DBUID and DBPWD values are passed to the IP for use in authenticating access to the data source.
To allow the data source to inherit the operating system (or network) user ID and password for data store authorization, specify DataSourceLogonMethod=OSIntegrated. For example, you may want to specify DataSourceLogonMethod=OSIntegrated to allow Kerberos to use the operating system user Id and password for authentication.
Note: Do not use this method when ServiceAuthMethods=anonymous.
A data source may allow anonymous access, that is, access without any user credentials. To allow anonymous access to the data source, specify DataSourceLogonMethod=anonymous. The user ID and password are not passed to the IP.