Subject | Re: [ib-support] User Management |
---|---|
Author | Andreas Pohl |
Post date | 2002-02-05T12:13:38Z |
You need a separate process to provide your own login (I personally use ICL comp to do it).
If you follow Martijns advise, you can store username/passw in your database/outside isc4.gdb and need a process/service/program that substitude application's username/passw. combination with *real* IB/FB ones.
It's a security issue to do it. Advantage: User never knows its real IB username/passw combination. Drawback: USER variable will provide an improper name (if you use prefix/postfix). I only substitute password with a unique one.
Separate process must provide:
-mapping app username/passw combinations with IB/FB ones while/before login process
-return real ones with fitting role
-a way to create and delete user accounts
Further ideas:
- Handling of available databases.
- Single login by using available network accounts, NT ACL, ...
Mit freundlichem Gruss & Best Regards
Andreas Pohl
apohl@...
www.ibp-consult.com
If you follow Martijns advise, you can store username/passw in your database/outside isc4.gdb and need a process/service/program that substitude application's username/passw. combination with *real* IB/FB ones.
It's a security issue to do it. Advantage: User never knows its real IB username/passw combination. Drawback: USER variable will provide an improper name (if you use prefix/postfix). I only substitute password with a unique one.
Separate process must provide:
-mapping app username/passw combinations with IB/FB ones while/before login process
-return real ones with fitting role
-a way to create and delete user accounts
Further ideas:
- Handling of available databases.
- Single login by using available network accounts, NT ACL, ...
Mit freundlichem Gruss & Best Regards
Andreas Pohl
apohl@...
www.ibp-consult.com
----- Original Message -----
From: "Riho-Rene Ellermaa" <r.ellermaa@...>
To: <ib-support@yahoogroups.com>
Sent: Tuesday, February 05, 2002 12:33 PM
Subject: RE: [ib-support] User Management
> That's what I thought - no easy solution :(
> This service is something that runs on server? on Windows95 and Linux
> also?