TDGSS TeradataKeyTab Property | Teradata Vantage - 17.10 - TeradataKeyTab - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Release Date
July 2021
Content Type
Administration
Security
Publication ID
B035-1100-171K
Language
English (United States)

This property defines the location for the storage of Kerberos keytab files on Vantage nodes and on Unity servers.

Default Property Value

TDGSS initially sets the value of this property to /etc/teradata.keytab, the default storage location, for supporting mechanisms.

Valid Settings

Any valid Linux file location.

Editing Guidelines

The TeradataKeyTab value in KRB5 applies to all Kerberos authentication, including logons that use the SPNEGO mechanism.

Coordinate the value of this property with the location of the keytab file specified when setting up Kerberos authentication. Use the default file location unless site security policy requires a different location. See Configuring Teradata Vantage and Unity Servers for Kerberos Authentication.

This property appears only in the library configuration file for the KRB5 mechanism. You must manually add it to the TDGSS configuration file before you can change the property value. See About Editing Configuration Files.

The Linux user under which Teradata Vantage runs must own and have read access to the keytab file. If you specify a custom (non-default) file location, you must grant read access permission for the file to the Vantage Linux user.