Add Multiple Directory Services to TDGSS | Teradata Vantage - 17.20 - Completing the <LdapConfig> Configuration Change - Analytics Database - Teradata Vantage

Teradata Vantage™ - Analytics Database Security Administration - 17.20

Deployment
VantageCloud
VantageCore
Edition
Enterprise
IntelliFlex
VMware
Product
Analytics Database
Teradata Vantage
Release Number
17.20
Published
June 2022
Language
English (United States)
Last Update
2023-03-07
dita:mapPath
hjo1628096075471.ditamap
dita:ditavalPath
qkf1628213546010.ditaval
dita:id
zuy1472246340572

After you complete the editing of the TDGSS configuration file to include the <LdapConfig> section, you should test the configuration before committing the configuration on the Teradata Vantage system.

  1. Verify the configuration is correct:
    1. Run tdgsstestcfg to test the configuration. It launches a test environment in a new shell that contains the updates to the configuration file.
      /opt/teradata/tdgss/bin/tdgsstestcfg
    2. Use the tdgssauth utility to test the new <LdapConfig> to verify that users from each service can be authenticated.
      • Specify a directory user and the necessary options using tdgssauth -u dir_user.

        See Working with tdgssauth.

      • Check the output.
      • If the authentication fails, exit the test shell and make the necessary configuration changes and rerun tdgsstestcfg and tdgssauth until the authentication succeeds.
    3. Exit the test shell:
      exit
  2. On the Vantage system, run the run_tdgssconfig utility to update the TDGSSCONFIG GDO with the new version of the <LdapConfig>.
    /opt/teradata/tdgss/bin/run_tdgssconfig
  3. If run_tdgssconfig indicates that a TPA reset is required, run tpareset.
    tpareset -f "use updated TDGSSCONFIG GDO"