Where InterSystems IRIS Stores Password Credentials
Where InterSystems IRIS Stores Password Credentials
InterSystems IRIS creates a dedicated database for password credentials when you create a new namespace with the following options enabled:
-
The default database for Globals in this namespace is a Local Database
-
Enable namespace for interoperability productions
InterSystems IRIS never creates a password database for the USER namespace.
Additionally, InterSystems IRIS for Health and HealthShare do not create password databases by default. You can call the CreateNewDBForSecondary() method of the %Library.EnsembleMgrOpens in a new tab class to create them as needed.
The password database appears in a subdirectory of the directory that contains the default database for globals. Both the password database and corresponding subdirectory are named by appending SECONDARY to the name of the default database for globals. For example, if the default database for globals is named LABS, then the password database and corresponding subdirectory are named LABSSECONDARY.
InterSystems IRIS protects the database with a resource named %DB_database, where database is the name of the password database. For example, the LABSSECONDARY database is protected by the %DB_LABSSECONDARY resource. Typically, users do not require privileges to the resource protecting a password database.
The data in the password database is stored in the ^Ens.SecondaryData.Password global.
If you create the primary InterSystems IRIS database as a mirrored database, then any password database is automatically mirrored using the same settings as the primary database. If you add mirroring to an existing InterSystems IRIS database, then you must explicitly add mirroring to the password database. For information about mirroring, see High Availability Guide.
