- Enable external authentication in the database. See External Authentication Controls.
- For the Vantage nodes with gateway installed, run:
gtwcontrol -a ON
- And, on all Vantage nodes, run dbscontrol and enter m g 26 0
dbscontrol m g 26 0
- For the Vantage nodes with gateway installed, run:
- Grant external authentication privileges to the matching database users. See External Authentication Requirements.
- Verify that the TdgssUserConfigFile.xml contains the following settings. Run dumpcfg to view the TDGSS configuration.
- MechanismEnabled = “yes” (on both the server and clients)
- AuthorizationSupported = “yes” (on all database nodes)
If AuthorizationSupported is not set to yes, the directory user can only have the database privileges available to the matching database username.
- (Optional) To use auto provisioning enable the DBSControl AutoProvision parameter.
dbscontrol m g 81 T
- Configure the required LDAP mechanism properties in the TdgssUserConfigFile.xml. See Directory Identification and Search Properties:
- LdapServerName
- Complete edits for the TdgssUserConfigFile.xml and enable them on the systems. The changes are made in the TDGSS site directory. See Changing the TDGSS Configuration. For database nodes, perform the steps in Making Changes to TdgssUserConfigFile.xml on Database Nodes.
- Set the LDAP mechanism as the default on all affected clients, or instruct users to specify the LDAP mechanism in the logon string. See the appropriate TTU client guide for how to configure a default mechanism for your client.
- Use the logon format for LDAP authentication. See Logging on Using LDAP Authentication and Authorization.