Windows integrated logins

The Windows integrated login feature allows you to maintain a single user ID and password for operating system and network logins, and database connections. To create an integrated login:

Enable the integrated login feature.
Create a database user to map the integrated login to (if one does not already exist).
Create an integrated login mapping between a Windows user or group profile and an existing database user. The Login Mappings folder in Sybase Central lists all users with integrated login privileges.
Connect from a client application and test the integrated login facility.

An integrated login is a mapping from one or more Windows users or Windows user group profiles to an existing database user. A user who has successfully navigated the security for that user profile or group and logged in to a computer can connect to a database without providing an additional user ID or password.

To do this, the database must be configured to use integrated logins and a mapping must have been granted between the user or group profile used to log in to the computer or network, and a database user.

Using an integrated login is more convenient for the user and permits a single security system for database and network security. The advantages of an integrated login include:

Users do not need to type a user ID or password.
Users are authenticated by the operating system. A single system is used for database security and computer or network security.
Multiple user or group profiles can be mapped to a single database user ID.
The name and password used to log in to the Windows computer do not have to match the database user ID and password.

Caution

Integrated logins offer the convenience of a single security system, but there are important security implications that database administrators should be familiar with. See Security concerns: Unrestricted database access and Security concerns: Copied database files.

Integrated login and the login_mode database option
Login mappings for Windows integrated logins and Kerberos principals
Creating an integrated login (Sybase Central)
Creating an integrated login (SQL)
Revoking an integrated login privilege (Sybase Central)
Revoking an integrated login privilege (SQL)
Integrated login connections from a client application
Integrated logins for Windows user groups
How to prevent Windows user groups members from connecting to a database
Network aspects of integrated logins
Default integrated login user
Security concerns: Unrestricted database access

Discuter à propos de cette page dans DocCommentXchange.

Windows integrated logins

Supported operating systems

Integrated login benefits

Caution

See also