To configure LDAP for authentication and authorization requires the following:
- Make sure that the LDAP MechanismEnabled property is set to “yes” (the default).
- Configure the LdapServerName property. See LdapServerName.
- [Required] Map directory users to other directory objects to define user database privileges in the directory. See Provisioning Directory Users with Teradata Schema Extensions or Using Native Directory Schema to Provision Directory Users.
- [Optional] Configure directory user identification options to speed directory searches for user authorization mapping. See Optimizing Directory Searches.
A user authorized by the directory username does not need an equivalent database username, as is the case for an authentication-only implementation.
The procedure for configuring mechanism property values in the TdgssUserConfigFile.xml is shown in Making Changes to TdgssUserConfigFile.xml on Database Nodes.