On 8-12-2014 20:11, [email protected] wrote:
> On Mon, 08 Dec 2014 08:33:59 +0100, liviuslivius
> <[email protected]> wrote:
>> Ok,
>>
>> now i see - .Net provider should use Legacy mode?
>> I wrongly supposed that it support FB3 options?
>> I use default from FBConfig - then i suppose it is Srp.
>> WireCrypt default is Enabled as i see in comments.
>
>>> No, it isn't the default; the default for the server is Required, meaning
>>> that you cannot connect with a client that doesn't provide wire encryption
>>> (which the .net provider and Jaybird currently don't support). You really
>>> explicitly need to set it to Enabled (Disabled works as well, but means
>>> that FB3 clients can't use encryption either.
>
>>> Mark
>
>
> Hi,
>
> i really do not understand how to set this config values
>
> AuthServer = Legacy_Auth
> AuthClient = Srp, Win_Sspi, Legacy_Auth
>
> and here "WireCrypt = Enabled (for client) / Required (for server)"
> should i use slash?
> WireCrypt = Disabled / Disabled

No. The comment describes the defaults. The server by default requires 
wire encryption, the fbclient.dll by default enables but doesn't require 
it. For the server you need to set it to:

WireCrypt = Enabled

> And when i set AuthServer = Legacy_Auth
> then i can not connect to FB from flamerobin

Yes, because your user is not a legacy user, meaning you can only 
connect using SRP
You need to set it to:

AuthServer = Srp, Legacy_Auth

> What exactly should i write in thoes settings to be able to connect to FB
> from: flamerobin and .Net in the same time?

Also, you need to define a user using the legacy usermanager to be able 
to connect from the .net provider.

This is described in chapter 12 of the new version of the release notes 
that Helen linked to, except for setting the correct value of AuthServer 
(probably because the installer already does part of that):

"
Legacy Authentication
If you do not intend to use SRP encrypted log-ins right away and want to 
use the security database — security3.fdb — as you have done in previous 
Firebird versions, proceed as follows:

1. Using a text editor, open firebird.conf and find the entry for the 
parameter UserManager:

#UserManager = Srp

Delete the “#” symbol and change the value to:

UserManager = Legacy_UserManager

2. Find the entry for the WireCrypt parameter:

#WireCrypt = Enabled (for client) / Required (for server)

Delete the “#” symbol and change the value to:

WireCrypt = Enabled
-- or, if you don't plan to use SRP encryption at all --
WireCrypt = Disabled

3. Save the changes.

4. Stop and restart Firebird for the changes to take effect.
"

Mark
-- 
Mark Rotteveel

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to