Subject Re: [ib-support] article: Securing Firebird Installation For Linux Shared Hosting
Author Steven Haryanto
Alan McDonald wrote:
> how much of this is true for windows?
> I tried, out of interest, the isql command without username and password and
> there is obviously no such hole in windows acl since the database was not
> created and the server objected to username and password

yes, confirmed. i've tried this on windows using interbase 6.0 and
firebird 1.0-821. isql and ibconsole always require a username and password.

however:

C:\firebird\bin>isql c:\foo.gdb2
Statement failed, SQLCODE = -902

I/O error for file "C:\FOO.GDB2"
-Error while trying to open file
-unknown Win32 error 2
Use CONNECT or CREATE DATABASE to specify a database
SQL>

if firebird indeed always require a username and password, i'd rather
firebird check username and password first before giving information to
the client that the database is not there.

--
sh