Release 10.1A: OpenEdge Data Management:
DataServer for ODBC

> ## Connections and security on Windows

> When you configure an ODBC data source on Windows, you can choose one of three levels of security:

> - Standard — Requires that a client pass a user ID and password that the ODBC data source validates against the list of users in the system login table. The request typically comes from a untrusted connection, such as through TCP/IP. The OpenEdge client or WebSpeed agent passes this information with the User ID (`-U`) and Password (`-P`) connection parameters.

> - Integrated — Relies on the Windows operating system to validate user information. The ODBC data source accepts user information from the process that requests a connection. The request must come from a trusted connection, such as one using Named Pipes. The ODBC data source performs no additional validation.

> - Mixed — Accepts requests from trusted or nontrusted connections.

> - If the connection is trusted and the client provides no user ID, a user ID that consists entirely of spaces, or a user ID that matches the user that started the process, the ODBC data source accepts the connection.
> - If the connection is untrusted, the OpenEdge client must provide the user ID and password.

> Progress Software Corporation recommends the following guidelines for working with an ODBC data source and Windows security:

> - Configure an ODBC data source to use Standard or Mixed security if you are using remote OpenEdge clients.

> - If you are using Mixed security, always have the clients specify the `-U` and `-P` connection parameters.

Copyright © 2005 Progress Software Corporation www.progress.com Voice: (781) 280-4000 Fax: (781) 280-4095