Connecting to DB with any user/password ---------------------------------------
Key: CORE-6493 URL: http://tracker.firebirdsql.org/browse/CORE-6493 Project: Firebird Core Issue Type: Bug Components: Security Affects Versions: 3.0.2 Environment: CentOS Linux 6.9 Connecting via SSH with root access Reporter: Haik Hairapetyan In a newly created database, I don't get any error message when I connect to the DB with the wrong user and password (the users TTT and AAA don't even exist) [root@fewww bin]# ./isql /opt/db/treewww/ftree.db -user ttt -password bbb; Database: /opt/db/treewww/ftree.db, User: TTT SQL> exit; [root@fewww bin]# ./isql /opt/db/treewww/ftree.db -user aaa -password ccc; Database: /opt/db/treewww/ftree.db, User: AAA SQL> SELECT rdb$get_context('SYSTEM', 'ENGINE_VERSION') from rdb$database; RDB$GET_CONTEXT =============================================================================== 3.0.2 At the same time, I get a 'regular' error message in another database when I try to connect the DB with the wrong credentials: [root@fewww bin]# ./isql /opt/db/testwww/ftest.db -user aaa -password ddd Statement failed, SQLSTATE = 08001 I/O error during "lock" operation for file "/opt/db/testwww/ftest.db" -Database already opened with engine instance, incompatible with current Use CONNECT or CREATE DATABASE to specify a database Could you please explain the matter? Thank you. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://tracker.firebirdsql.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira Firebird-Devel mailing list, web interface at https://lists.sourceforge.net/lists/listinfo/firebird-devel