Testing Directory Entries | Teradata Vantage - Testing Directory Authentication and Authorization Setup - Advanced SQL Engine - Teradata Database

Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.05
17.00
Published
September 2020
Language
English (United States)
Last Update
2021-01-23
dita:mapPath
ied1556235912841.ditamap
dita:ditavalPath
lze1555437562152.ditaval
dita:id
B035-1100
lifecycle
previous
Product Category
Teradata Vantageā„¢

You can use one or more of the following methods to check Teradata Vantage-related directory entries, either as a spot check upon completing directory setup, or later to investigate user problems.

Tool Usage
BTEQ or other Teradata Vantage client application Log on through a Vantage client application, such as BTEQ, to verify that their user credentials are set up correctly in the directory.
tdgssauth Use tdgssauth to test TDGSS security mechanism configurations on Unity servers and Vantage nodes. tdgssauth is used before bringing new configurations live, to test and correct authentication, authorization, and policy failures offline. It can test LDAP, Kerberos, and TDNEGO configurations.
tdsbind Use tdsbind to verify directory user mapping to Vantage users, roles, profiles, and IP filters, or to test edits to LDAP mechanism property values before using the run_tdgssconfig tool to create the TDGSSCONFIG.bin.
ldapsearch Use ldapsearch to examine directory user attributes when investigating the source of user problems.