17.10 - User and Library Configuration File Content - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Release Date
July 2021
Content Type
Administration
Security
Publication ID
B035-1100-171K
Language
English (United States)
TDGSS Configuration File Type Description
Library file Contains the default TDGSS configuration for the current Advanced SQL Engine release. The TdgssLibraryConfigFile.xml, defines the security elements, properties, and values available on the system.

The TdgssLibraryConfigFile.xml file is located in the /opt/teradata/tdgss/etc directory on Unity and SQL Engine nodes.

Do not edit the library configuration file.
User file Contains the system-specific TDGSS configuration, including any user edits. Settings in this file override those in the library configuration file.

The TdgssUserConfigFile.xml file is located in the /opt/teradata/tdgss/etc directory on Unity and SQL Engine nodes. Additionally, Unity (if used) copies the TdgssUserConfigFile.xml file to TdgssUnityConfig.xml in /etc/opt/teradata/config/unity and uses that file for its TDGSS configuration file.

Editing of this file is permitted, but not required. You can edit the user configuration file to:
  • Control availability of mechanisms to all clients by setting the MechanismEnabled property
  • Control the source for authorization of user privileges for externally authenticated users by setting the AuthorizationSupported property
  • Customize LDAP properties, as required for directory user authentication and authorization
  • Change mechanism property values
  • Add new mechanisms and properties

Property value settings must be the same for all nodes.

If you are using Unity you must set up the PROXY mechanism on both Unity servers and the SQL Engine nodes.

An upgrade to a new TDGSS release does not overwrite the user configuration file to allow customizations to be retained.

For more information, see Changing the TDGSS Configuration.