17.10 - Changing the Configuration on Teradata Vantage Nodes - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Release Date
July 2021
Content Type
Administration
Security
Publication ID
B035-1100-171K
Language
English (United States)
  1. On the Teradata Vantage node with the lowest ID number, go to the directory that contains TdgssUserConfigFile.xml.
    cd /opt/teradata/tdat/tdgss/site
  2. Make a backup copy of TdgssUserConfigFile.xml and save it according to your site standard backup procedures.
  3. Edit the TdgssUserConfigFile.xml using a text editor, such as vi.
  4. Uncomment the TDNEGO mechanism section, if not already done, and edit the properties as desired.
    Do not set the DefaultMechanism property to “yes” in the TDNEGO section. If DefaultMechanism is set to yes, older clients requesting the default mechanism will get a failed logon.
    • If you are performing an upgrade, rather than a new installation, the TdgssUserConfigFile.xml in /opt/teradata/tdat/tdgss/site directory is preserved so the TDNEGO mechanism may not be present in the file. Copy the TDNEGO mechanism from the TdgssUserConfigFile.xml in the /opt/teradata/tdat/tdgss/<version>/etc directory. Paste the mechanism into /opt/teradata/tdat/tdgss/site/TdgssUserConfigFile.xml file. Edit it as needed.
    • (Optional) If there are TTU 16.0 or higher .NET clients that use SPNEGO as a TDNEGO negotiated mechanism to access Teradata Database 15.10, see the following for configuration details: SPNEGO Mechanism Offered by TDNEGO on Teradata Database 15.10 for TTU 16.0 .NET Clients.
    • (Optional) Edit the DefaultNegotiatingMechanism. For example, to set TDNEGO as the DefaultNegotiatingMechanism update the property to “yes” in the TDNEGO mechanism.
  5. Run the run_tdgssconfig utility to update the TDGSSCONFIG GDO.
    /opt/teradata/tdgss/bin/run_tdgssconfig
  6. Run tpareset to activate the changes to the TDGSS configuration.
    tpareset -f “use updated TDGSSCONFIG GDO”
You only need to perform this procedure once from any node in a Teradata Database or Teradata Vantage system. Running the run_tdgssconfig tool distributes the change to all database nodes.