Firebird SQL database Security (in Russian)
Firebird Linux.
Firebird
(Firebird Foundation)peshkoff at mail.ru
Firebird Linux
- Firebird Unix-
Firebird
API,
Firebird Linux
Linux: Firebird, Unix- (SHADOW NFS)
,
Firebird Linux
:
Firebird Linux
Firebird Linux : Classic SuperServer
, Linux
Sourceforge.net
Firebird Linux
inetd / xinetd -
Firebird
Firebird Linux
, LinuxBugcheckAbort
LockMemSize, EventMemSize -
RemoteFileOpenAbility NFS
Firebird Linux
, Linux ( 2.5)LockSemCount
LockSignal UNIX-,
Firebird
,
, -
Firebird
InterBase ( , )
Windows 3.X
Windows NT, 3.X
OSRI
OSRI (Open System Relational Interface)
YvalveNetwork listener/ (isql)
Engine8_12Engine13Network redirector
Firebird
1.0 2002 , politically correct
1.5 2004 , root linux ( windows)
SQL- (External Table + UDF)
Firebird
2.0 2006 ,
-
Firebird
2.1 -
Windows Firebird (Trusted Authentication)
- Firebird 2.5
( 32 )
- Firebird 2.5
SQL
GRANT REVOKE
RDB$ADMIN
(windows) RDB$ADMIN
- Firebird 2.5
SQL
CREATE USER name PASSWORD 'pw' FIRSTNAME 'first' MIDDLENAME
'middle' LASTNAME 'last'
ALTER USER name PASSWORD 'pw' FIRSTNAME 'first' MIDDLENAME
'middle' LASTNAME 'last'
DROP USER name
- Firebird 2.5
SQL
2.5 security2.fdb
Alter User - , SYSDBA
GRANTED BY GRANT REVOKE SYSDBA ,
SQL-
SQL
- Firebird 2.5
GRANTED BY:
sysdba:CREATE ROLE role1;GRANT role1 TO user1 WITH ADMIN
OPTION;
user1:GRANT role1 TO PUBLIC;
sysdba:REVOKE role1 FROM PUBLIC GRANTED BY user1;
- Firebird 2.5
REVOKE
REVOKE ALL ON ALL FROM
,
# gsec -del GUEST1# isql employeeSQL> REVOKE ALL ON ALL FROM
GUEST1;
- Firebird 2.5
- Firebird 2.5
RDB$ADMIN
GRANT RDB$ADMIN TO GUEST1 RDB$ADMIN GUEST1 (SYSDBA)
REVOKE RDB$ADMIN FROM GUEST1
- Firebird 2.5
RDB$ADMIN
ALTER ROLE RDB$ADMIN SET / DROP AUTO ADMIN MAPPING Firebird 3 (,
) (, )
Firebird 3. ()
- ( )
-
Firebird 3. ()
FileName = $(root)/db/data1.fdb Security =
$(root)/db/secure.fdb
FileName = /raid/data.fdb Security = self
FileName = $(arg0) Security = $(root)/security2.fdb
Firebird 3. ()
-
Trusted authentication 2.1
Trusted : public , private
LDAP, PAM ..
CHAP
Firebird 3. ()
SQLALTER ROLE name ADD OS_NAME 'os_name'
ALTER USER name ADD OS_NAME 'os_name'
ALTER ROLE name DROP OS_NAME 'os_name'
ALTER USER name DROP OS_NAME 'os_name'
!
www.firebirdsql.org
