Securing local connections to a host

The database server administrator (DBSA) can use the SECURITY_LOCALCONNECTION configuration parameter to set up security checking for local connections with the same host.

The following table shows the settings of the SECURITY_LOCALCONNECTION configuration parameter that you can use.
Table 1. SECURITY_LOCALCONNECTION configuration parameter settings
Setting Explanation
0 No security checking occurs.
1 HCL® OneDB® compares the user ID of the owner trying to connect with the connection user ID. If these do not match, HCL OneDB rejects the connection.
2 HCL OneDB performs the same checking that is performed when SECURITY_LOCALCONNECTION is set to 1. In addition, HCL OneDB gets the peer port number from the network API and verifies that the connection is coming from the client program.

If you set SECURITY_LOCALCONNECTION to 2, you must have SOCTCP or IPCSTR network protocols.

If SECURITY_LOCALCONNECTION is set to 1 or 2, HCL OneDB establishes a connection only if the connection meets the requirements of the security check.