Home
Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL Informix®
The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Auditing data security
The ADTCFG file
ADTCFG file conventions

Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
- Security in HCL Informix®
  The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
  - Securing data
  - Auditing data security
    - Overview of auditing with the Informix® secure auditing facility
    - Audit administration
    - Audit analysis
    - The onaudit utility
      Use the onaudit utility to manage audit masks and auditing configuration.
    - The onshowaudit utility
      Use the onshowaudit utility to view the audit information from an existing audit trail. You can use this command to extract information for a particular user, database server, or both, making it possible to isolate a particular subset of data from a potentially large audit trail.
    - Audit event codes and fields
      The secure-auditing facility audits certain database server events.
    - The ADTCFG file
      - ADTCFG file conventions
      - ADTERR configuration parameter
        ADTERR specifies how the database server behaves when it encounters an error while it writes an audit record.
      - ADTMODE configuration parameter
        Use ADTMODE to control the level of auditing. The ADTMODE parameter is now deprecated; you should use the new ADT_CLASSIC_ENABLED, ADT_DBSA, and ADT_DBSSO parameters instead.
      - ADTPATH configuration parameter
        ADTPATH specifies the directory in which the database server saves audit files.
      - ADTROWS configuration parameter
        Use the ADTROWS configuration parameter to control selective row-level auditing of tables.
      - ADTSIZE configuration parameter
        Use the ADTSIZE configuration parameter to specify the maximum size of an audit file.
      - ADT_CLASSIC_ENABLED configuration parameter
        Use this configuration parameter to enable or disable classical (as opposed to syslog) auditing.
      - ADT_DBSA configuration parameter
        Use this configuration parameter to enable or disable the mandatory auditing for the DBSA group.
      - ADT_DBSSO configuration parameter
        Use this configuration parameter to enable or disable the mandatory auditing for the DBSSO group.
      - ADT_SYSLOG_ENABLED configuration parameter
        Use this configuration parameter to enable or disable the Audit to Syslog (ASL) functionality.
      - ADT_SYSLOG_FACILITY configuration parameter
        Use this configuration parameter to help with filtering messages in the syslog configuration.
      - ADT_SYSLOG_IDENTIFIER configuration parameter
        Use this configuration parameter to choose the identifier name to be used in syslog messages.
      - ADT_SYSLOG_OPTIONS configuration parameter
        Use this configuration parameter to specify options to openlog().
      - ADT_SYSLOG_PRIORITY configuration parameter
        Use this configuration parameter to specify a priority while filtering messages in the syslog daemon.

ADTCFG file conventions

The UNIX™ file $INFORMIXDIR/aaodir/adtcfg or the Windows™ file %INFORMIXDIR%\aaodir\adtcfg is called the ADTCFG configuration file or the ADTCFG file. In the ADTCFG file, each parameter is on a separate line. The file can also contain blank lines and comment lines that start with a pound (#) symbol. The syntax of a parameter line is as follows:

PARAMETER_NAME              parameter_value            # comment

Parameters and their values in the ADTCFG file are case sensitive. The parameter names are always in uppercase letters. You must put white space (tabs, spaces, or both) between the parameter name, parameter value, and optional comment. Do not use any tabs or spaces within a parameter value.

For information about additional Informix® configuration parameters, see the Informix® Administrator's Reference.