Abstract
This chapter describes Open Database Connectivity (ODBC) SQL/MP, its users, authentication, security configuration, and the Security-Related Parameters. The NonStop ODBC (Open Database Connectivity) server allows access to HP NonStop SQL/MP tables from PC and UNIX client applications that use Microsoft's ODBC or an SQL server product such as Microsoft Access. ODBC security involves configuring the security-related parameters and the audit environment. While authenticating the ODBC, server first tries to find the username in the ODBC Alias name table. If the username submitted by the client does not correspond to an Alias-name, the server checks to see if it is a valid Guardian username or alias. If the input username is found to be a valid Guardian name, then the authentication process continues. Changes to the ODBC configuration should only be made through the ODBC owner privileged user id. The HP Non-Stop ODBC manual suggests that the NOSUTIL program be PROGID’ed to allow non-privileged users to perform various ODBC maintenance functions, but this increases the risk of ODBC environment being compromised by accident or intentionally. The other key issues addressed in the chapter are ODBC System Catalog, Other ODBC programs and utilities like SPELIB, ODBC servers, and auditing in ODBC. Auditing of ODBC user activity can be obtained by two ways: resource accounting and auditing. Resource accounting is intended to gather ODBC usage statistics, whereas tracing acts more as a debugging tool.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
More From: Securing HP NonStop Servers in an Open Systems World
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.