Configuring single sign-on security

Note: The ADO and ADO.NET clients are currently available only in OpenAccess SDK 8.1. However, they are compatible with the OpenAccess SDK 9.0 server.

The combination of security features provided by OpenAccess SDK and the Linux, UNIX, and Windows operating systems allows you to configure a single sign-on environment for ODBC, JDBC, and ADO applications. Users log on to the security system on the network and can connect to the DBMS using their operating system credentials.

Kerberos authentication provides single sign-on for ODBC, ADO, and JDBC applications on Linux, UNIX, and Windows. NTLM authentication provides single-sign on for ODBC and ADO applications on Windows only.

To configure single sign-on security:

1. Configure your data store logon security as described in .

2. Choose one of the following authentication methods:

   • Kerberos. See Configuring Kerberos authentication for details on configuring Kerberos authentication.
   • NTLM. Set the ServiceAdminAuthMethods or ServiceAuthMethods service attribute to a value of integrated_nt.

3. Restart the OpenAccess SDK Server.

Note: If ADO.NET Clients will be connecting to this service, you should add another ServiceAuthMethods attribute: specify ServiceAuthMethods=OSLogon(HUID,HPWD) or ServiceAuthMethods=OSLogon(UID,PWD). These ADO.NET Clients must provide a valid server user ID and password.