Subject | Re: [firebird-support] Connecting to FB 1.5.5 with 3.0.1 lib |
---|---|
Author | Lukas Gradl |
Post date | 2018-04-22T10:11:16Z |
Zitat von "Mark Rotteveel mark@... [firebird-support]"
<firebird-support@yahoogroups.com>:
Setting up a firebird.conf according to the document in Helens link I
could connect again.
The downside of this method is I have to restrict Client
authentification for ALL servers to legacy_auth when using flamerobin,
as this program is not able to set a custom fbclient for each
connection.
IMHO it would have been a better optin to implement some
fallback-option in the client lib and to prevent the fallback in the
conf if you don't need it.
But this way the downwards compatibility of the client is broken badly
and there are a lot installations out there where it is not so easy to
upgrade to a more recent version....
regards
Lukas
<firebird-support@yahoogroups.com>:
> On 22-4-2018 09:05, helebor@... [firebird-support] wrote:Thanks Mark and Helen!
>> By default, the V.3 client tries to connect using SRP authentication
>> protocol. The V.1.5 server cannot respond to that. You need to set up
>> a client-side firebird.conf containing
>>
>> AuthClient = Legacy_Auth
>>
>> Take out Srp and Win_sspi.
>> Don't try to configure AuthServer at the client side.
>> Don't copy the whole firebird.conf to the client, only
>> the parameters you want to configure client side.
>>
>> Or pass this string in the API.
>
> That is not correct and not necessary. For protocol v13, the client will
> try **all** authentication plugins, but even if that were not the case,
> Firebird 1.5 is protocol v10, and with protocol v10 it will only use
> legacy authentication anyway.
>
>> See
>> https://www.ibphoenix.com/files/Authentication_FB3.pdf
>> Read the whole of it. There is probably more you have missed,
>> such as the need for new user account records in security3.fdb.
>
Setting up a firebird.conf according to the document in Helens link I
could connect again.
The downside of this method is I have to restrict Client
authentification for ALL servers to legacy_auth when using flamerobin,
as this program is not able to set a custom fbclient for each
connection.
IMHO it would have been a better optin to implement some
fallback-option in the client lib and to prevent the fallback in the
conf if you don't need it.
But this way the downwards compatibility of the client is broken badly
and there are a lot installations out there where it is not so easy to
upgrade to a more recent version....
regards
Lukas