16.10 - LdapNetworkBaseFQDN - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

The fully qualified distinguished name of the directory container object that contains ipNetwork entries.

An ipNetwork entry specifies an IP address or a range of IP addresses. When you configure an ipNetwork object as a member of an:

  • Internal Network Group object, the included IP addresses are subject to any policy in which the Network Group object is a member.
  • External Network Group object, the included IP addresses are exempt from any policy in which the Network Group object is a member.

Valid Settings

  • “” (default), that is, no FQDN is specified
  • The FQDN of a bindable directory object that contains ipNetwork entries.

Supporting Mechanisms

The LdapNetworkBaseFQDN property is not configurable in a mechanism. Configure the LdapNetworkBaseFQDN property as part of the <LdapConfig> section in the TdgssUserConfigFile.xml, immediately following the <Mechanisms> section.

To set a value, you must manually add this property to the TdgssUserConfigFile.xml. See About Editing Configuration Files.

Editing Guidelines

  • Edit this property on the database and on Unity, if used. Also see Coordinating Mechanism Property Values.
  • You must uniquely identify the object that contains ipNetwork entries if you assign security policies by IP address.
  • If you configure this property, you do not need to specify a value for the LdapBaseFQDN property.

For details on configuring LDAP properties to configure security policy, see Configuring Security Policies in the TdgssUserConfigFile.xml.