Authentication is the process of validating the identity of a user before allowing access to perform any operation on database objects. Db2 does not provide native authentication, so a security facility outside the database system, such as the operating system security facility or a security plug-in, is required.
Authorization is the process of evaluating the privileges that have been assigned to a user to determine what operations the user can perform on database objects. This is managed using a set of authorities and privileges within Db2. The following diagram shows an example of authentication and authorization within Db2:
The authentication database manager configuration parameter specifies how and where the authentication of a user should take place. By default, it is set to SERVER. The authentication...
