16.10 - Using the External Authentication Controls - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

Teradata Database provides the following methods to control external authentication:

  • The DBSControl utility controls external authentication for all users.
    You can also use the Database Window interface to manage external authentication. The SET EXTAUTH command toggles the same internal control switch used by the DBSControl utility. You can use the GET EXTAUTH command to check whether or not external authentication is enabled.
  • The Gateway Control utility controls external authentication for users that log on through a particular gateway or host group.
For a host group:
  • If either the DBSControl or Gateway Control utility is set to disable external authentication, while the other utility is set to enable external authentication, external authentication is disabled, and users entering through that gateway cannot be externally authenticated.

  • If either the DBSControl or Gateway Control utility is set to allow only external authentication, while the other utility is set to enable external authentication, users entering through that gateway can only be authenticated externally.

    Setting either of these controls to allow only external authentication prevents mainframe connections unless the TDP is also set up for external authentication.

For information on the DBSControl and Gateway Control utilities, see Utilities.