On Teradata Vantage:
- If you install Kerberos in a non-standard location, you must edit the TdgssUserConfigFile.xml. Perform steps 1 through 3 of Changing the TDGSS Configuration.
- The TdgssUserConfigFile.xml does not contain a KRB5 mechanism by default. Instead, go to the TdgssLibraryConfigfile.xml (located in the same directory as the TdgssUserConfigFile.xml), copy the Linux version of the KRB5 mechanism, and paste it into the TdgssUserConfigFile.xml.You only need to make a copy of the KRB5 mechanism because you are customizing the Kerberos configuration (you are customizing for a non-standard location). If you using the default configuration of Kerberos you do not need to perform this step.
- After copying the Linux version of KRB5 into the TdgssUserConfigFile.xml, note that the default path to the library is:
<RequiredLibrary Path="/usr/lib64/libgssapi_krb5.so"/>
On a Teradata Vantage node:
- Edit the path value for Linux KRB5 in the TdgssUserConfigFile.xml, to show the new (non-standard) file location used on your system.
- Run the run_tdgssconfig utility to update the TDGSSCONFIG GDO.
/opt/teradata/tdgss/bin/run_tdgssconfig
run_tdgssconfig tells you when a TPA reset is required. For example, if you change <RequiredLibrary>, then you need a TPA reset. - If run_tdgssconfig indicates that a TPA reset is needed, run tpareset to activate the changes to the TDGSS configuration.
tpareset -f “use updated TDGSSCONFIG GDO”
You only need to perform this procedure once from any node in a Teradata Vantage system. Running the run_tdgssconfig tool distributes the change to all database nodes.