Operating-system identity
The database authenticates the current process’s OS identity. No database password is supplied. Supported adapters configure integrated authentication, existing Kerberos tickets or local peer authentication; see the driver prerequisites below.
Database and operating-system support
The operating system is the client running DubUrl, not the database server. ✔ means this authentication method is supported through the listed driver route; install the required provider or driver and satisfy the prerequisites in the notes. ✘ means this documented method is unavailable for that route. Database names span their catalogued native ADO.NET, ODBC and OLE DB driver rows. Driver-specific sign-in options for other methods are separate from the shared APIs shown here.
| Database | Driver route | Windows | Linux | macOS |
|---|---|---|---|---|
| Apache Drill | ODBC | ✔ | ✔ | ✔ |
| CockroachDB | ADO.NET | ✔ | ✔ | ✔ |
| CrateDB | ADO.NET | ✘ | ✘ | ✘ |
| DuckDB | ADO.NET | ✘ | ✘ | ✘ |
| ODBC | ✘ | ✘ | ✘ | |
| Firebird SQL | ADO.NET | ✔ | ✘ | ✘ |
| IBM Db2 | ADO.NET | ✔ | ✔ | ✘ |
| MariaDB | ADO.NET | ✔ | ✔ | ✔ |
| ODBC | ✔ | ✔ | ✔ | |
| Microsoft Access | ODBC | ✘ | ✘ | ✘ |
| OLE DB | ✘ | ✘ | ✘ | |
| Microsoft Excel | ODBC | ✘ | ✘ | ✘ |
| OLE DB | ✘ | ✘ | ✘ | |
| Microsoft SQL Server | ADO.NET | ✔ | ✔ | ✔ |
| ODBC | ✔ | ✔ | ✔ | |
| OLE DB | ✔ | ✘ | ✘ | |
| MySQL | ADO.NET | ✔ | ✔ | ✘ |
| ODBC | ✔ | ✔ | ✘ | |
| OLE DB | ✘ | ✘ | ✘ | |
| Oracle Database | ADO.NET | ✔ | ✔ | ✔ |
| OLE DB | ✔ | ✘ | ✘ | |
| PostgreSQL | ADO.NET | ✔ | ✔ | ✔ |
| ODBC | ✔ | ✔ | ✔ | |
| QuestDB | ADO.NET | ✘ | ✘ | ✘ |
| ODBC | ✘ | ✘ | ✘ | |
| SingleStore | ADO.NET | ✔ | ✔ | ✔ |
| Snowflake | ADO.NET | ✘ | ✘ | ✘ |
| SQLite | ADO.NET | ✘ | ✘ | ✘ |
| Teradata | ADO.NET | ✔ | ✔ | ✔ |
| Text files | ODBC | ✘ | ✘ | ✘ |
| Timescale | ADO.NET | ✔ | ✔ | ✔ |
| ODBC | ✔ | ✔ | ✔ | |
| Trino | ADO.NET | ✘ | ✘ | ✘ |
| ODBC | ✔ | ✔ | ✔ |
OLE DB is supported only on Windows. All routes require a compatible provider or driver for the client OS and architecture.
CLI and Library selection
Select –os-identity on connection check, schema deploy or schema inspect. It conflicts with password prompts, stored credentials, –username and OAuth; no password is acquired or retried.
The Library selects the same strategy with ConnectionAuthentication.OperatingSystemIdentity().
Support marks identify implemented driver mappings, not verified live authentication on every platform. Install the exact compatible driver and configure server accounts, TLS, SPNs and an existing ticket/session independently. No machine setup or ticket acquisition is performed.
- SQL Server ODBC requires Microsoft ODBC 17/18; OLE DB requires MSOLEDBSQL. LocalDB is Windows only.
- PostgreSQL supports network GSS/SSPI and separate local Unix peer authentication. psqlODBC requires libpq 16 or later. Self-hosted TimescaleDB and CockroachDB require their documented server configuration; CockroachDB GSSAPI requires Enterprise licensing.
- MariaDB and SingleStore require plugin-only server accounts and an explicit URL database-role hint. Native Linux Kerberos login and negative cases were verified on .NET 8/9/10. Other platforms and ODBC remain mapping evidence.
- MySQL requires explicitly selected MySql.Data or MySQL ODBC 8.0.32 or later and the Enterprise Kerberos server plugin. The default MySqlConnector/MySQL route is unsupported. Live MySQL acceptance is blocked by the unavailable licensed server.
- Db2 requires TargetPrincipal and the platform-specific IBM package. Oracle requires external-authentication/Oracle Net prerequisites. Teradata requires vendor SPNEGO support; Firebird trusted authentication is Windows only and does not establish Kerberos.
- Drill requires the MapR/HPE ODBC driver and KrbServiceHost. Trino requires Simba ODBC; NReco is unsupported.
See exact driver settings and verification boundaries for CLI/Library examples, platform prerequisites, TLS/role rules, fixture commands and unverified live routes.