Authenticating MSSQL queries on db2 SP

Rosina Porco

Authenticating MSSQL queries on db2 SP
Hi all,

We are DB2 V7 on Z/os / racf,

My question is on security measures in place when MS sql queries or
Oracle queries call a DB2 storedprocedure .

In our environment , presently the queries pass the userid and
password and we allow execute SP privileges to that userid .

This makes me nervous, I don't really like userids and password being
hard coded.

I am wondering what the rest of the DB2 world does for this situation.

Ex: of MSSQL connection

OdbcConnection myConnection = new
OdbcConnection("DSN=DB2P;UID=xxxxxx;PWD=xxxxxxx");



Thanks for sharing your knowledge and expertise.

Rosie Porco : [login to unmask email]
Database Administrator, CCS
University of Ottawa
Tel. (613) 562-5800 x1397 Fax (613) 562-5998




---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Rosina Porco

Re: Authenticating MSSQL queries on db2 SP
(in response to Rosina Porco)
Hi all,

We are DB2 V7 on Z/os / racf,

My question is on security measures in place when MS sql queries or
Oracle queries call a DB2 storedprocedure .

In our environment , presently the queries pass the userid and
password and we allow execute SP privileges to that userid .

This makes me nervous, I don't really like userids and password being
hard coded.

I am wondering what the rest of the DB2 world does for this situation.

Ex: of MSSQL connection

OdbcConnection myConnection = new
OdbcConnection("DSN=DB2P;UID=xxxxxx;PWD=xxxxxxx");



Thanks for sharing your knowledge and expertise.

Rosie Porco : [login to unmask email]
Database Administrator, CCS
University of Ottawa
Tel. (613) 562-5800 x1397 Fax (613) 562-5998




---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm