In a client-server environment, which two of the following can be used to verify passwords?
-
System Catalog
-
Client Applications
-
Client Operating Systems
-
Application Server
In client-server authentication, password verification happens at two points: the Client Operating System (when using CLIENT authentication type, the client OS validates credentials) and the Application Server (when using SERVER authentication, the DB2 server verifies passwords). System Catalog stores user definitions but doesn't verify passwords. Client Applications initiate authentication but don't perform the verification themselves.
In a client-server setup, password verification can happen either at the client operating system level (OS-level login/authentication) or at an intermediary application server that authenticates users before handing off to the database. The system catalog stores database object metadata, not credentials, and the client application itself typically just forwards credentials rather than verifying them.