TDGSS LdapUserBaseFQDN Property | Teradata Vantage - 17.10 - LdapUserBaseFQDN - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Release Date
July 2021
Content Type
Administration
Security
Publication ID
B035-1100-171K
Language
English (United States)

This property helps narrow the directory search to the children of the object that contains user objects, when LDAP authenticates a user.

This property applies to all mechanisms that can specify directory authorization.

Default Property Value

TDGSS initially sets the value of this property to “” for all mechanisms, that is, it does not define an FQDN

Valid Settings

  • “” (default), that is, the property does not specify an object to narrow the search
  • The FQDN of the directory object that contains directory user objects

Editing Guidelines

  • This property appears only in the library configuration file. You must manually add it to the TDGSS configuration file before you can configure it. See About Editing Configuration Files.
  • You must set a value for this property if the directory is Active Directory, ADAM, AD LDS or any uncertified LDAPv3-compliant directory. See About Certified Directories.
  • The value of the LdapUserBaseFQDN property often corresponds to the value of the identity search or identity map Base attribute, but the Base attribute is not a substitute for the LdapUserBaseFQDN. If you configure an identity search and the search fails, LDAP uses the value of the LdapUserBaseFQDN property. See Optimizing Directory Searches.
  • Edit this property on database nodes and on the Unity server, if used. Also see Coordinating Mechanism Property Values for Unity.