17.10 - Applying an Option Policy to a Network Group - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Published
July 2021
Language
English (United States)
Last Update
2022-02-15
dita:mapPath
ppz1593203596223.ditamap
dita:ditavalPath
wrg1590696035526.ditaval
dita:id
zuy1472246340572

When you configure option membership by network group, the type of network group determines the effects of membership.

  • Internal network group IP addresses are subject to an Option in which the group is a member
  • External network group IP addresses are exempt from an Option in which the group is a member.

For example, when using Teradata schema extensions:

dn: cn=no-direct-connect,cn=options,cn=policy1,
 cn=tdatrootP,dc=domain1,dc=com
changetype: modify
add: member
member: cn=behind-the-firewall,cn=internal-network-groups,cn=policy1,
 cn=tdatrootP,dc=domain1,dc=com

For example, when using native schema extensions:

dn: cn=has-policy,ou=options,ou=policy1,
 ou=tdatrootP,dc=domain1,dc=com
changetype: modify
add: member
member: cn=behind-the-firewall,ou=internal-network-groups,ou=policy1,
 ou=tdatrootP,dc=domain1,dc=com