17.10 - Using the External Authentication Controls - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Release Date
July 2021
Content Type
Administration
Security
Publication ID
B035-1100-171K
Language
English (United States)
Teradata Vantage provides the following methods to control external authentication:
  • The DBSControl utility controls external authentication for all users.
  • The Gateway Control utility controls external authentication for users that log on through a particular gateway or host group.
For a host group:
  • If either the DBSControl or Gateway Control utility is set to disable external authentication, external authentication is disabled. Users entering through that gateway cannot be externally authenticated.
  • If either the DBSControl or Gateway Control utility is set to allow only external authentication, users entering through that gateway can only be authenticated externally. Setting either of these controls to allow only external authentication also prevents mainframe connections unless the TDP is also set up for external authentication.
You can also use the Database Window interface, or comparable command-line interfaces to the Console Subsystem (CNS), such as cnsterm and cnstool, to manage external authentication. The SET EXTAUTH command toggles the same internal control switch used by the DBSControl utility. You can use the GET EXTAUTH command to check whether or not external authentication is enabled.

For information on DBSControl, Gateway Control, Database Window and starting the utilities, see Teradata Vantage™ - Database Utilities, B035-1102.