16.10 - LdapServiceFQDN - Teradata Database

Teradata Database Security Administration

Teradata Database
Release Number
Release Date
June 2017
Content Type
Publication ID
English (United States)

The value of the LdapServiceFQDN property is a distinguished name (DN) that identifies a bindable object in the directory, which represents the service or application that requires binding.

You must configure LdapServiceFQDN and LdapServicePassword for:

  • All service binds, or the directory automatically uses an anonymous service bind. For an explanation of service binds and a list of features that require them, see Using Service Binds.
  • Service entries in the <LdapConfig> section of the TdgssUserConfigFile.xml, for example, when configuring multiple directory services for accessing a Teradata Database system.
If one of these conditions exists and you do not configure the LdapServiceFQDN property, the system defaults to binding anonymously, which may produce unwanted results, including bind failure.

Valid Settings

  • “” (default), which specifies an anonymous bind
  • The FQDN of a bindable directory object that represents the service or application identity.

Supporting Mechanisms for LdapServiceFQDN

The LdapServiceFQDN property is usable for all mechanisms that support service binds.

Mechanisms that are not listed in the table do not support this property. The Property Editable column indicates if the setting for a property may be edited.
Mechanism Property Editable?
KRB5 Must be edited if AuthorizationSupported is set to yes; otherwise Do Not Edit.
LDAP May Be Edited (required for use of service binds)
To set a value, you must manually add this property to the TdgssUserConfigFile.xml for needed mechanisms. See About Editing Configuration Files.

Editing Guidelines

  • Edit this property on database nodes and on the Unity server, if used.
  • You must uniquely identify each service account.
  • If you configure this property, you must also specify a value for the LdapServicePassword property.