Click here to view and discuss this page in DocCommentXchange. In the future, you will be sent there automatically.

login_mode option [database]

Controls the use of integrated and Kerberos logins for the database.

One or more of: Standard, Integrated, Kerberos, Mixed (deprecated)

Standard

Can be set for the PUBLIC group only. DBA authority required. Takes effect immediately.

This option specifies whether standard, integrated, and Kerberos logins are permitted. One or more of the following login modes are accepted (the values are case insensitive):

• Standard  Standard logins are permitted. This is the default setting. Standard connection logins must supply both a user ID and password, and do not use the Integrated or Kerberos connection parameters.

• Integrated  Integrated logins are permitted.

• Kerberos  Kerberos logins are permitted.

• Mixed (deprecated)  This is equivalent to specifying Standard,Integrated.

If you specify multiple login modes, the database server allows all the specified modes.

You can specify multiple values in a comma-separated list. This list cannot contain white space. For example, the following setting allows both standard and integrated logins:

SET OPTION PUBLIC.login_mode = 'Standard,Integrated';

If a database file is not secured and can be copied by unauthorized users, the temporary public login_mode option should be used (both for integrated and Kerberos logins). This way, integrated and Kerberos logins are not supported by default if the file is copied.

• Using integrated logins
• Using Kerberos authentication
• Security concerns: Copied database files

Enable only integrated logins (standard logins and Kerberos logins fail):

SET OPTION PUBLIC.login_mode = 'Integrated';

Enable standard and Kerberos logins (integrated logins fail):

SET OPTION PUBLIC.login_mode = 'Standard,Kerberos';

Enable standard, integrated, and Kerberos logins:

SET OPTION PUBLIC.login_mode = 'Standard,Integrated,Kerberos';