The Ultimate Guide to InterBase Users Manager Managing database security is a critical task for any administrator. In Embarcadero InterBase, user security is handled through a specialized subsystem. This guide covers how to efficiently create, modify, and manage database users. Understanding InterBase User Security
InterBase separates database user authentication from standard database tables.
The Security Database: All user credentials live in a central file named admin.ib (or isc4.gdb in older legacy versions).
The SYSDBA Account: The System Database Administrator (SYSDBA) is the master account. Only SYSDBA or users with operating system root privileges can manage other users.
Scope: Users created in the security database can log into any database hosted on that specific server instance. Tools for Managing Users
You can manage InterBase users through graphic interfaces or command-line utilities. 1. IBConsole (Graphical Interface)
IBConsole is the official Windows GUI tool for InterBase management. Open IBConsole and connect to your server.
Double-click on the Server Security icon under your server instance.
Right-click the Users node to add, edit, or delete accounts. 2. gsec (Command-Line Utility)
The gsec tool allows command-line and scripted user management. It is located in the InterBase bin directory. Common gsec Command Reference
To use gsec, you must run it from your terminal or command prompt. Below are the most common administrative tasks. Launching gsec Interactively gsec -user SYSDBA -password masterkey Use code with caution. Adding a New User
GSEC> add jsmith -pw password123 -fname “John” -mname “M” -lname “Smith” Use code with caution. Modifying an Existing User GSEC> modify jsmith -pw newpassword456 Use code with caution. Deleting a User GSEC> delete jsmith Use code with caution. Displaying All Users GSEC> display Use code with caution. Best Practices for InterBase User Management
Change the Default Password: Always change the default SYSDBA password (masterkey) immediately after installation.
Apply the Principle of Least Privilege: Do not share the SYSDBA account. Create unique accounts for individual users and applications.
Automate Backups: Include the security database (admin.ib) in your regular backup schedules.
Use Roles for SQL Privileges: gsec handles authentication (login access). Use SQL GRANT and REVOKE statements inside your specific database to control what data those users can see.
Leave a Reply