Supported IBM data server driver configuration keywords

The CLPPlus interface supports a subset of the keywords you can use in the IBM® data server driver configuration file (db2dsdriver.cfg).

The following IBM data server driver configuration keywords are supported in a CLPPlus environment.
Authentication (database)
The Authentication keyword specifies the authentication mechanism that is used when you connect to a database. The CLPPlus interface supports the Kerberos, SERVER_ENCRYPT, SERVER_ENCRYPT_AES, SERVER, and TOKEN authentication mechanisms.
Note: The TOKEN option is available starting from Db2® version 11.5.4.
Authentication (LDAP)
The Authentication keyword specifies the authentication mechanism that is used during the LDAP server connection. Supported authentication mechanisms vary based on the LDAP service provider. Check your LDAP server documentation as different LDAP servers support different authentication mechanisms. Examples of authentication mechanisms are "none", "simple", and sasl_mech. If you specify an unsupported authentication mechanism, the attempted connection fails.
The Authentication keyword must be defined in the ldapserver section of the IBM data server driver configuration file.
BaseDN
The BaseDN keyword defines the base distinguished name for the LDAP server.
EnableLDAP
The EnableLDAP keyword defines whether LDAP support is enabled. If the EnableLDAP keyword is set to No, the CLPPlus interface does not read the server details from the ldapserver section of the IBM data server driver configuration file.
ExtendedIndicators
The ExtendedIndicators keyword specifies whether the ExtendedIndicators property is enabled or disabled during a database connection.
LDAPServerHost
The LDAPServerHost keyword defines the IP address or host name of the LDAP server.
LDAPServerPort
The LDAPServerPort keyword defines the LDAP Server port number.
Password
If the Password keyword is defined in the dsncollection section or databases section of the IBM data server driver configuration file, the specified Password keyword value is used as the default password when you connect to the database under which the UserID keyword is specified.
If the Password keyword is defined in the ldapserver section of the IBM data server driver configuration file, the specified Password keyword value is used to connect to the LDAP server.
SecurityTransportMode
The SecurityTransportMode keyword sets the communication security type. You can set the SecurityTransportMode keyword to SSL for establishing SSL connections. The SSL CLPPlus connections are implemented by the JDBC driver that uses the Java™ SSL APIs and it does not use the IBM Global Security Kit (GSKit) libraries.
Starting in Fix Pack 7, the CLPPlus interface supports the SecurityTransportMode keyword. If you specify the SecurityTransportMode keyword in earlier fix packs or specify a value other than SSL, the SecurityTransportMode keyword is silently ignored.
SSLServerCertificate
The SSLServerCertificate keyword specifies the fully qualified name of a self-signed server certificate. You can set the SSLServerCertificate keyword when the SecurityTransportMode keyword is set to SSL and the self-signed certificate from a server is used.
Starting in Fix Pack 6, the CLPPlus interface supports the SSLServerCertificate keyword. If you specify the SSLServerCertificate keyword in earlier fix packs or specify an invalid value, the SSLServerCertificate keyword is silently ignored.
UserID
If the UserID keyword is defined in the dsncollection section or databases section of the IBM data server driver configuration file, the specified UserID keyword value is used as the default user ID when you connect to the database under which the UserID keyword is specified.
If the UserID keyword is defined in the ldapserver section of the IBM data server driver configuration file, the specified UserID keyword value is used to connect to the LDAP server.

For more information about supported keywords, see the Related reference.