Release 10.1A: OpenEdge Data Management:
DataServer for ODBC

Connections and security on Windows

When you configure an ODBC data source on Windows, you can choose one of three levels of security:

Standard — Requires that a client pass a user ID and password that the ODBC data source validates against the list of users in the system login table. The request typically comes from a untrusted connection, such as through TCP/IP. The OpenEdge client or WebSpeed agent passes this information with the User ID (-U) and Password (-P) connection parameters.
Integrated — Relies on the Windows operating system to validate user information. The ODBC data source accepts user information from the process that requests a connection. The request must come from a trusted connection, such as one using Named Pipes. The ODBC data source performs no additional validation.
Mixed — Accepts requests from trusted or nontrusted connections.
If the connection is trusted and the client provides no user ID, a user ID that consists entirely of spaces, or a user ID that matches the user that started the process, the ODBC data source accepts the connection.
If the connection is untrusted, the OpenEdge client must provide the user ID and password.

Progress Software Corporation recommends the following guidelines for working with an ODBC data source and Windows security:

Configure an ODBC data source to use Standard or Mixed security if you are using remote OpenEdge clients.
If you are using Mixed security, always have the clients specify the -U and -P connection parameters.