BUILTIN Derby users

Derby provides a simple repository of user names and passwords using the BUILTIN authentication mechanism.

Important: Derby's BUILTIN authentication mechanism is suitable only for development and testing purposes, and it will no longer be documented in future releases. It is strongly recommended that production systems rely on NATIVE authentication, an external directory service such as LDAP, or a user-defined class for authentication. It is also strongly recommended that production systems protect network connections with SSL/TLS.

To use the BUILTIN repository, set derby.authentication.provider to BUILTIN.

derby.authentication.provider=BUILTIN

You can create user names and passwords for Derby users by specifying them with the derby.user.UserName property.

Note: These user names are case-sensitive for user authentication. User names are SQL92Identifiers. Delimited identifiers are allowed:

derby.user."FRed"=java

Note: For passwords, it is a good idea not to use words that would be easily guessed, such as a login name or simple words or numbers. A password should be a mix of numbers and upper- and lowercase letters.

Database-level properties
When you create users with database-level properties, those users are available to the specified database only.
System-level properties
When you create users with system-level properties, those users are available to all databases in the system.

Parent topic: Working with user authentication