Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-05 Thread Alex Peshkoff
On 11/05/2015 07:20 PM, Mark Rotteveel wrote: > On Thu, 5 Nov 2015 16:07:05 +0300, Alex Peshkoff wrote: >> That's how authentication and providers work, but for management such >> mode is not good. >> Imagine that one can issue identical but with different password command >> CREATE USER twice, ad

Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-05 Thread Mark Rotteveel
On Thu, 5 Nov 2015 16:07:05 +0300, Alex Peshkoff wrote: > That's how authentication and providers work, but for management such > mode is not good. > Imagine that one can issue identical but with different password command > CREATE USER twice, adding users with different passwords in different

Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-05 Thread Alex Peshkoff
On 11/05/2015 04:55 PM, Paul Vinkenoog wrote: > Alex Peshkoff: > >> Except one detail - I've tried to keep legacy auth as 'old-style' as >> possible, and SYSDBA for it is pre-created in security database. With >> old password 'masterke'. > On a side note: > > How about generating a random password

Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-05 Thread Paul Vinkenoog
Alex Peshkoff: > Except one detail - I've tried to keep legacy auth as 'old-style' as > possible, and SYSDBA for it is pre-created in security database. With > old password 'masterke'. On a side note: How about generating a random password for legacy SYSDBA on Windows and save that in a file, li

Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-05 Thread Alex Peshkoff
On 11/05/2015 02:29 PM, Paul Reeves wrote: > On Thursday 05 Nov 2015 13:49:26 Alex Peshkoff wrote: >> On 11/04/2015 11:45 AM, Paul Reeves wrote: >>> So the question is this - can the authentication method be switched >>> between >>> srp and legacy without modifiying security3.fdb? >> Paul, switchin

Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-05 Thread Mark Rotteveel
On Thu, 05 Nov 2015 12:29:12 +0100, Paul Reeves wrote: >> Parameter UserManager in it sets plugin used to work with security >> database. >> If more than one plugin is given, first plugin from the list is used by >> default when changing user and all that plugins are used to list users in >> sec$u

Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-05 Thread Paul Reeves
On Thursday 05 Nov 2015 13:49:26 Alex Peshkoff wrote: > On 11/04/2015 11:45 AM, Paul Reeves wrote: > > So the question is this - can the authentication method be switched > > between > > srp and legacy without modifiying security3.fdb? > > Paul, switching authentication method does not require mod

Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-05 Thread Alex Peshkoff
On 11/04/2015 11:45 AM, Paul Reeves wrote: > So the question is this - can the authentication method be switched between > srp and legacy without modifiying security3.fdb? > Paul, switching authentication method does not require modification of security3.fdb - only firebird.conf. Parameter UserM

Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-04 Thread Paul Reeves
On Wednesday 04 Nov 2015 16:25:22 Mark Rotteveel wrote: > On Wed, 04 Nov 2015 09:45:27 +0100, Paul Reeves > > So the question is this - can the authentication method be switched > > between > > srp and legacy without modifiying security3.fdb? > > You can have two sysdba accounts in security3.fdb

Re: [Firebird-devel] FB3 and authentication and security3.fdb

2015-11-04 Thread Mark Rotteveel
On Wed, 04 Nov 2015 09:45:27 +0100, Paul Reeves wrote: > I think I've nailed down the basic installation requirements for > configuration > of the FB3 security database under windows. On first install the user can > choose between the new and the legacy authentication methods, SYSDBA is > added

[Firebird-devel] FB3 and authentication and security3.fdb

2015-11-04 Thread Paul Reeves
I think I've nailed down the basic installation requirements for configuration of the FB3 security database under windows. On first install the user can choose between the new and the legacy authentication methods, SYSDBA is added correctly and firebird.conf is updated correctly. So far, so good