SERVER_ENCRYPT authentication in CLPPlus

The CLPPlus interface supports connections to DSN aliases with SERVER_ENCRYPT authentication as defined in the IBM® data server driver configuration file (db2dsdriver.cfg).

Important: The SERVER_ENCRYPT authentication type is deprecated and is disabled in strict FIPS mode. For more information on the deprecation, see Authentication methods for your server.

The IBM data server driver configuration file is an XML file that contains a list of DSN aliases and their properties. If the DSN alias entry contains the Authentication property value that is set to SERVER_ENCRYPT, the SERVER_ENCRYPT authentication mechanism is used. For more information, see the DSN aliases in CLPPlus topic.

Examples

The following example shows a connection being established with the contents of the IBM data server driver configuration file, which includes the Authentication parameter value.

Consider the following IBM data server driver configuration file contents:

<configuration>
	<dsncollection>
		<dsn alias="S" name="SAMPLE" host="9.121.221.159" port="50000">
       <parameter name="Authentication" value="SERVER_ENCRYPT"/>
		</dsn>
	</dsncollection>
	<databases>
		<database name="SAMPLE" host="9.121.221.159" port="50000">
			<parameter name="UserID" value="john"/>
		</database>
	</databases>
</configuration>

The user starts a CLPPlus session and attempts a connection to the DSN alias "S".

C:\>clpplus -nw
CLPPlus: Version 1.5
Copyright (c) 2009, 2011, IBM CORPORATION.  All rights reserved.

SQL> connect
Enter DATABASE NAME [SAMPLE]: S
Enter ID [john]:
Enter password: **********

Database Connection Information :
---------------------------------
Hostname = 9.121.221.159
Database server = DB2/NT  SQL09075
SQL authorization ID = john
Local database alias = S
Port = 50000