17.10 - Removing a NegotiatedMechanism from TDNEGO - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Release Date
July 2021
Content Type
Administration
Security
Publication ID
B035-1100-171K
Language
English (United States)

To remove a NegotiatedMechanism:

  1. Edit TdgssUserConfigFile.xml and change Enable="yes" to Enable="no". For example:
    <NegotiatedMechanism ObjectId="1.3.6.1.4.1.191.1.1012.1.1.9" Enable="no"/>
    Do not remove all of the NegotiatedMechanisms from TDNEGO. TDNEGO has NegotiationSupported set to yes, so it must have at least one NegotiatedMechanism ObjectId set; otherwise, an error is reported by the run_tdgssconfig executable.

    If you want to disable TDNEGO, see Disabling TDNEGO.

  2. Run the run_tdgssconfig command to enable the change.
  3. Run tpareset (on Teradata Vantage SQL Engine nodes only).

For specific steps on editing the configuration, see: Changing the Configuration on Teradata Vantage Nodes.