DRDA_AUTHENTICATION_ENTRY_INFO view

The DRDA_AUTHENTICATION_ENTRY_INFO view returns user server authentication entry information.

A server authentication entry defines a userid and password to send on a connect request over TCP/IP. A server authentication list is associated with every user profile on the system. The Add Server Authentication Entry (ADDSVRAUTE) command is used to add entries.

When a DRDA connection over TCP/IP is attempted without specifying a userid and password, and password authentication is required, the Db2® for i client checks the server authentication list for the user profile under which the client job is running. If it finds a match between the RDB name on the CONNECT statement and the server name in an authentication entry, or the server name is the special value QDDMDRDASERVER, the associated userid (and password if one exists) is used for the connection.

A server authentication entry can also be used to specify a userid and password to be used for a DDM connection over TCP/IP. When a DDM connection is attempted over TCP/IP, and password authentication is required, the Db2 for i client checks the server authentication list for the user profile under which the client job is running. If it finds a match between the RDB name specified in the DDM file and the server name in an authentication entry, or the server name is the special value QDDMDRDASERVER, the associated userid (and password if one exists) is used for the connection. If no RDB name is specified in the DDM file and the server name is either of the special values QDDMDRDASERVER or QDDMSERVER, the associated userid (and password if one exists) is used for the connection.

Authorization: The caller must have *OBJOPR and *READ authority to the *USRPRF object.

The following table describes the columns in the view. The system name is DRDA_AUTHE. The schema is QSYS2.

Table 1. DRDA_AUTHENTICATION_ENTRY_INFO view
Column Name System Column Name Data Type Description
AUTHORIZATION_NAME USER_NAME VARCHAR(10) The user profile on the client system.
SERVER_NAME SRVR_NAME VARGRAPHIC(200) CCSID 1200 The target system for the authentication entry.

This is the name of the RDB or QDDMDRDASERVER that is used for connections made on behalf of RDB DDM files or DRDA connections. For a non-RDB DDM file that does not use the RDB directory, the value will be QDDMDRDASERVER or QDDMSERVER. See Client security in a TCP/IP network for more information.

SERVER_AUTHORIZATION_NAME SRVR_USER VARGRAPHIC(1000) CCSID 1200 The user profile on the target system.
PASSWORD_STORED PW_STORED VARCHAR(3) Indicates whether a password is stored for the authentication entry.
YES
A password is stored for the authentication entry.
NO
A password is not stored for the authentication entry.

Example

For an auditor, generate a list of user profiles that have authentication entries on the system:

SELECT DISTINCT(AUTHORIZATION_NAME) 
  FROM QSYS2.DRDA_AUTHENTICATION_ENTRY_INFO