Using Granular Access Control - Implementing Database Security and Auditing - page 194

Figure 6.4
A sample directory
naming structure.
main database vendors have interfaces to all LDAP servers—sounds like an
impossible dream-come-true, doesn't it? This is because LDAP is an indus-
try standard that defines the protocol allowing the database to talk with the
LDAP server. Some examples of common integrations that are often seen
include the following:
DB2 UDB on Windows integrates with Active Directory. DB2 UDB
8 can be configured to integrate instance and database objects within
Active Directory. Note that in this case all authenticated users in the
domain have read permission to the DB2 instance and any database
object registered with Active Directory (i.e., both authentication
models and authorization models are integrated).
Not surprisingly, Microsoft SQL Server is integrated with the Active
Directory. In fact, if SQL Server uses Windows Authentication (the
preferred configuration—see Chapter 4), then SQL Server really uses
the Windows operating system for authentication, which, as men-
tioned, uses Active Directory. In addition to authentication, the inte-
gration between SQL Server and Active Directory includes the
following: