Understanding DB2®: Learning Visually with Examples

10.2. Authentication

Authentication is the process of validating a supplied user ID and password against a security facility. This authentication occurs when you try to connect to a database or attach to an instance. The security facility is external to DB2; user IDs and passwords are not stored in a DB2 server. Authentication can occur at any of the following:

• At a DB2 server ( Figure 10.1, Instance 1)

• At a DB2 client (Figure 10.1, Instance 2)

• Using a customized loadable library via Generic Security Service (GSS) (Figure 10.1, Instance 3)

• At a Kerberos security service (Figure 10.1, Instance 4)

The authentication process also determines which operating system groups the user belongs to. Group membership lookup is essential because it lets users ...