During testing DSI noticed that mask/unmask privilege of the user will depend on the user ?ingres? privilege. As per Actian, the best way to effectively authenticate and login to database is by using +user flag. Sample: sql +user=username,password database_name. Apparently when using ?-u? flag, it inherits some properties from the OS. This option is only available for users who have DB_ADMIN privilege.