Add Multiple Directory Services to TDGSS | Teradata Vantage - Completing the <LdapConfig> Configuration Change - Advanced SQL Engine - Teradata Database

Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.05
17.00
Published
September 2020
Language
English (United States)
Last Update
2021-01-23
dita:mapPath
ied1556235912841.ditamap
dita:ditavalPath
lze1555437562152.ditaval
dita:id
B035-1100
lifecycle
previous
Product Category
Teradata Vantageā„¢

After you complete the editing of the TDGSS configuration file to include the <LdapConfig> section, you should test the configuration before committing the configuration on the Teradata Vantage system or Unity server.

  1. On the Vantage system (or Unity server), run the run_tdgssconfig utility to update the TDGSSCONFIG GDO with the new version of the <LdapConfig>.
    /opt/teradata/tdgss/bin/run_tdgssconfig
  2. Use the tdgssauth utility to test the new <LdapConfig> to verify that users from each service can be authenticated.
    1. Specify a directory user and the necessary options using tdgssauth -u dir_user .

      See Working with tdgssauth.

    2. Check the output.
    3. If the authentication fails, make the necessary configuration changes and rerun steps 1 through 3 until the authentication succeeds.
  3. Run tpareset to activate the changes in the TDGSS configuration.
    tpareset -f "use updated TDGSSCONFIG GDO"