This may be a simple question, but I'm not able to find the answer thus far... We are running VAS on our DB2 servers (AIX). We are going to be installing the db2_sys-auth for authentication with VAS.
Currently, one business area is using an IBM kerb module for DB2 which will lookup a user's group member from AD, regardless of whether the user is local or in Active Directory. (My understanding is the IBM plugin can't handle the kerb ticket, so it does an ldap query instead).
Ok, the actual question... if half of my users will be Active Directory users connecting to DB2, I know that db2_sys-auth will work, because we've proven that in our environment already. But, if the other half of the users are local, can we still utilize their corresponding AD account's group membership for authorization to DB2? If so, do their corresponding AD accounts have to be Unix enabled?
Thanks in advance...
Currently, one business area is using an IBM kerb module for DB2 which will lookup a user's group member from AD, regardless of whether the user is local or in Active Directory. (My understanding is the IBM plugin can't handle the kerb ticket, so it does an ldap query instead).
Ok, the actual question... if half of my users will be Active Directory users connecting to DB2, I know that db2_sys-auth will work, because we've proven that in our environment already. But, if the other half of the users are local, can we still utilize their corresponding AD account's group membership for authorization to DB2? If so, do their corresponding AD accounts have to be Unix enabled?
Thanks in advance...