OLE DB Provider for DB2 1.0 has been updated to support the KERBEROS and KRB_SERVER_ENCRYPT authentication types

View products that this article applies to.

INTRODUCTION

Microsoft OLE DB Provider for DB2 1.0 is included with the Microsoft SQL Server 2005 Feature Pack. OLE DB Provider for DB2 1.0 supports only the SERVER DB2 authentication type when OLE DB Provider for DB2 1.0 connects to an IBM DB2 database.

OLE DB Provider for DB2 1.0 cannot connect to an IBM DB2 database that is configured for one of the following DB2 authentication types:

SERVER_ENCRYPT
KERBEROS
KRB_SERVER_ENCRYPT

Back to the top

MORE INFORMATION

OLE DB Provider for DB2 1.0 has been updated to support connecting to IBM DB2 systems that are configured to use the KERBEROS and KRB_SERVER_ENCRYPT authentication types. After you apply this update, OLE DB Provider for DB2 1.0 can use the Kerberos security method when it connects to IBM DB2 databases that are configured for KERBEROS or KRB_SERVER_ENCRYPT authentication.

To configure OLE DB Provider for DB2 1.0 to use Kerberos authentication, follow these steps:

Click Start, click All Programs, click Microsoft OLE DB Provider for DB2, and then click Data Access Tool.
Create a new data source, or modify an existing data source.
Click Next until you reach the Security dialog box.
Click Kerberos in the Security method menu.
Enter a valid principle name in the Principle name box.

Note The OLE DB Provider for DB2 1.0 will not connect to an IBM DB2 system that is configured to use KERBEROS and KRB_SERVER_ENCRYPT authentication types if the provider is not configured to use Kerberos. If the IBM DB2 system is configured to use KRB_SERVER_ENCRYPT authentication, and the OLE DB Provider for DB2 1.0 is not configured for Kerberos, IBM DB2 tries to use an authentication type that is equivalent to SERVER_ENCRYPT. However, the OLE DB Provider for DB2 1.0 does not support SERVER_ENCRYPT authentication. Therefore, the connection attempt will fail.

Connection String

The following properties must be added to the connection string for OLE DB Provider for DB2 1.0 to enable Kerberos authentication:

Integrated Security=SSPI
Principle Name=principle name

The following is an example of a connection that is configured for Kerberos authentication.

Provider=DB2OLEDB;Initial Catalog=IBMDB2;Network Transport Library=TCP;Host CCSID=1252;PC Code Page=1252;Network Address=IBMDB2DB;Network Port=446;Package Collection=NULLID;Process Binary as Character=False;Units of Work=RUW;DBMS Platform=DB2/6000;Defer Prepare=False;Principle Name=sqluser/test.domain.com@domain.com;Integrated Security=SSPI;Persist Security Info=False;Data Source=IBMDB2;Connection Pooling=True;Derive Parameters=False;

Back to the top

Update information

A supported feature that modifies the product's default behavior is now available from Microsoft, but it is only intended to modify the behavior that this article describes. Apply it only to systems that specifically require it. This feature may receive additional testing. Therefore, if the system is not severely affected by the lack of this feature, we recommend that you wait for the next OLE DB Provider for DB2 1.0 service pack that contains this feature.

To obtain this feature immediately, contact Microsoft Product Support Services. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support (http://support.microsoft.com/contactus/?ws=support)

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

x86-based version

Collapse this tableExpand this table

File name	File version	File size	Date	Time	Platform
Db2oledb.dll	7.0.2485.0	507,392	25-Feb-2006	01:38	x86
Microsoft.hostintegration.dataaccesslibrary.dll	7.0.2485.0	2,554,640	27-Feb-2006	23:33	x86
Microsoft.hostintegration.dataaccesstool.exe	7.0.2485.0	617,224	27-Feb-2006	23:33	x86
Mseidrda.dll	7.0.2485.0	765,440	25-Feb-2006	01:39	x86

x64-based version

Collapse this tableExpand this table

File name	File version	File size	Date	Time	Platform	Service branch
Db2oledb.dll	7.0.2485.0	747,008	25-Feb-2006	02:29	x64	Not applicable
Microsoft.hostintegration.dataaccesslibrary.dll	7.0.2485.0	2,550,544	27-Feb-2006	23:04	x64	Not applicable
Microsoft.hostintegration.dataaccesstool.exe	7.0.2485.0	613,128	27-Feb-2006	23:04	x64	Not applicable
Mseidrda.dll	7.0.2485.0	1,332,736	25-Feb-2006	02:29	x64	Not applicable
Db2oledb.dll	7.0.2485.0	507,392	25-Feb-2006	01:38	x86	SYSWOW
Mseidrda.dll	7.0.2485.0	765,440	25-Feb-2006	01:39	x86	SYSWOW

Note Because of file dependencies, the most recent hotfix may also contain additional files.

Back to the top

REFERENCES

For more information about IBM DB2 authentication options, visit the following IBM Web site:

http://publib.boulder.ibm.com/infocenter/db2luw/v8/index.jsp?topic=/com.ibm.db2.udb.doc/admin/r0000294.htm (http://publib.boulder.ibm.com/infocenter/db2luw/v8/index.jsp?topic=/com.ibm.db2.udb.doc/admin/r0000294.htm)

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Back to the top