17.10 - Changing the Configuration on Teradata Vantage Nodes and Unity Server - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Release Date
July 2021
Content Type
Administration
Security
Publication ID
B035-1100-171K
Language
English (United States)

On Teradata Vantage:

  1. If you install Kerberos in a non-standard location, you must edit the TdgssUserConfigFile.xml. Perform steps 1 through 3 of Changing the TDGSS Configuration.
  2. The TdgssUserConfigFile.xml does not contain a KRB5 mechanism by default. Instead, go to the TdgssLibraryConfigfile.xml (located in the same directory as the TdgssUserConfigFile.xml), copy the Linux version of the KRB5 mechanism, and paste it into the TdgssUserConfigFile.xml.
    You only need to make a copy of the KRB5 mechanism because you are customizing the Kerberos configuration (in this case you are customizing for a non-standard location). If you using the default configuration of Kerberos you do not need to perform this step.
  3. After copying the Linux version of KRB5 into the TdgssUserConfigFile.xml, note that the default path to the library is:
    <RequiredLibrary Path="/usr/lib64/libgssapi_krb5.so"/>

    On a Teradata Vantage node:

    1. Edit the path value for Linux KRB5 in the TdgssUserConfigFile.xml, to show the new (non-standard) file location used on your system.
    2. Run the run_tdgssconfig utility to update the TDGSSCONFIG GDO.
      /opt/teradata/tdgss/bin/run_tdgssconfig
      run_tdgssconfig tells you when a TPA reset is required. For example, if you change <RequiredLibrary>, then you need a TPA reset.
    3. If run_tdgssconfig indicates that a TPA reset is needed, run tpareset to activate the changes to the TDGSS configuration.
      tpareset -f “use updated TDGSSCONFIG GDO”

    You only need to perform this procedure once from any node in a Teradata Vantage system. Running the run_tdgssconfig tool distributes the change to all database nodes.

    On Unity servers: See Teradata® Unity™ Installation, Configuration, and Upgrade Guide for Customers, B035-2523 for Unity configuration information.