Logging On Using External Authentication | GRANT LOGON | Teradata Vantage - Logging On Using External Authentication - Advanced SQL Engine - Teradata Database

External authentication permits a user to log on to a computer one time and access a database without providing a user name, password, or account name. To enable this, you must explicitly map any directory users who are not already mapped to Vantage users in the directory. If you do not create an explicit mapping between an unmapped user and Vantage, that directory user cannot log on to Vantage.

Another way to do this is to grant the user logon privileges with a null password.

The following procedure creates a user who can log on to the system through a gateway that does not have the Append Domain Name option set using the Gtwcontrol utility. This user is already defined as user rhh.

1. Create user rhh using the following CREATE USER request:

   CREATE USER rhh AS
   PERM = 10000000,
   PASSWORD = rhh;

2. Grant user rhh the following logon privileges using a GRANT LOGON request:

   GRANT LOGON ON ALL
    TO rhh
    WITH NULL PASSWORD;

The following procedure creates a Vantage user who can log on to a Teradata system through a gateway that has Append Domain Name set. This user is already defined as user rhh and her account is in the esw2kdev domain.

1. Create user rhh using the following CREATE USER request:

   CREATE USER "rhh@esw2kdev" AS
    PERM = 10000000,
    PASSWORD = rhh;

2. Grant user rhh the following logon privileges using a GRANT LOGON request:

   GRANT LOGON ON ALL
    TO "rhh@esw2kdev"
    WITH NULL PASSWORD;