RE: [cobalt-users] create interbase database

["Todd Kirk" <tkirk@xxxxxxxxxxxxxx>]

>can anyone give me a brief hint how to create a Interbase
>database on a cobalt RaQ4 for a dedicated virtual
>webserver?
>
>On what security issues must I think about?

You can use command line tools if you wish, such as ISQL found in
/opt/interbase from memory or to make life easier a GUI program like
IBExpert (which we use ;-). A GUI will make life easy to some the following
steps

1. Create a database, using the create database off the menu in IBExpert,
www.ibexpert.com or command line tool ISQL
2. Change the SYSDBA default password under the user manager in the menu,
for a straight forward security step.
3. Create a user specific to the database you just created using the user
manager in IBExpert, and grant them the privileges you want that user to
have OR use command line tool ISQL. You can just grant them all privileges,
but restrict them from giving other users privileges, known as grant option
in user privileges
4. Then use the cobalt GUI to make a DSN connection to this database, using
the username and password you setup. The test button in the Cobalt GUI will
report back OK if everything has been setup correctly here.
5. Note - Ibexpert does not require the setup of ODBC on your client
computer, nor does it require the DSN setup from the Cobalt GUI, but to make
a webpage to talk to this database you will need to setup both the client
and Cobalt DSN
6. Setup your client computer DSN connection, we use Easysoft ODBC from
www.easysoft.com
7. Then use IBExpert to create the table, fields and even input/import some
data if you like. Commit the changes using the red arrow tick OR use command
line tool ISQL
8. Make you webpage and test
9. For security, I cannot say I am anything close to an expert with this
field, more a beginner when it comes to security. But if you change the
SYSDBA default password, make sure you include the .gdb files you create
(this is the database file) and that you use a user specific to each
database/site you create then that goes a long way to security. If someone
cracks one database they still won't have the SYSDBA access to go after
other databases on your server. The rest of security should fall back on
your normal security measures, logcheck, ipchains etc etc.

If anyone has some more or better security measures for Interbase please let
us know.



regards,

Todd Kirk