Subject | Re: [firebird-support] Adding extra security to Friebird logins. |
---|---|
Author | Milan Babuskov |
Post date | 2003-10-22T14:11:47Z |
norgepaul wrote:
I have the idea. It works only if your application is the only one that
has access to a Firebird server.
Create special table(s) in your database which will store usernames,
encrypted passwords, and all other data (last login timestamp, etc.),
and control everything from your application. Create a single user for
database (or use SYSDBA) and have it's password hidden somewhere in the app.
Also, for encrypted passwords, zebedee is a viable option. That of
course means that you have to install zebedee client on all workstations.
Just my 2 cents.
--
Milan Babuskov
http://fbexport.sourceforge.net
> We have a customer that has a whole bunch of security demands for our[snip]
> Firebird powered application. I know it's a long shot, but can
> anybody tell me whether or not the following demands (or some of them)
> are possible by manipulating security.fdb or if any of the features
> have been implemented in FB1.5 (Encrypted passwords?).
>
> Any ideas would be much appreciated.
I have the idea. It works only if your application is the only one that
has access to a Firebird server.
Create special table(s) in your database which will store usernames,
encrypted passwords, and all other data (last login timestamp, etc.),
and control everything from your application. Create a single user for
database (or use SYSDBA) and have it's password hidden somewhere in the app.
Also, for encrypted passwords, zebedee is a viable option. That of
course means that you have to install zebedee client on all workstations.
Just my 2 cents.
--
Milan Babuskov
http://fbexport.sourceforge.net