Integrated login and the login_mode database option

The login_mode database option determines whether the integrated login feature is enabled. As database options apply only to the database in which they are found, different databases can have a different integrated login setting even if they are loaded and running on the same server.

The login_mode database option accepts the following values:

Standard Standard logins are permitted. This is the default setting. Standard connection logins must supply both a user ID and password, and do not use the Integrated or Kerberos connection parameters. An error occurs if an Integrated or Kerberos login connection is attempted.
Integrated Integrated logins are permitted.
Kerberos Kerberos logins are permitted.
LDAPUA LDAP user authenticated logins are permitted.
CloudAdmin This login mode is for internal use by the cloud.

Caution

Setting the login_mode database option to not allow Standard logins restricts connections to only those users or groups who have been granted an integrated, Kerberos, LDAPUA, or CloudAdmin login mapping. Attempting to connect with a user ID and password generates an error unless you are a user with SYS_AUTH_DBA_ROLE system role.

To allow more than one type of login, specify multiple values for the login_mode option. For example, the following SQL statement sets the value of the login_mode database option to allow both standard and integrated logins:

SET OPTION PUBLIC.login_mode = 'Standard,Integrated';

If a database file can be copied, the temporary public login_mode option should be used (for login modes other than standard). In this way, login modes other than standard are not supported by default if the file is copied.

Integrated login and the login_mode database option

Caution

See also