LDAP authentication for DB2

[Nic]

Hi,

I am using a 4 node AIX cluster with DB2 installed and controlled via
Veritas Cluster Manager. VCS will fail databases between the 4 nodes
when required.
I also have LDAP configured, so use central user management.

My question is this: If I have a production database on node 1 and a
development database on node 2, and the application uses the same
login, say APPS, how can I stop the development APPS user being able
to login to the production APPS user? Due to LDAP, they use the same
account/password.

Any one come across this senario?

Thanks,
Nic

[Philip Sherman]

You haven't stated what platform you're running on but I believe that a
firewall will do what you need. It can restrict the production server to
accept requests only from the IP addresses of those authorized to use
the system. Failover will also have to adjust the firewalls.

This will not protect you from a developer going to an authorized
production system and using it to gain access to the production data.

Phil Sherman

Nic wrote:

Hi,

I am using a 4 node AIX cluster with DB2 installed and controlled via
Veritas Cluster Manager. VCS will fail databases between the 4 nodes
when required.
I also have LDAP configured, so use central user management.

My question is this: If I have a production database on node 1 and a
development database on node 2, and the application uses the same
login, say APPS, how can I stop the development APPS user being able
to login to the production APPS user? Due to LDAP, they use the same
account/password.

Any one come across this senario?

Thanks,
Nic