16.10 - Applying IPFilters to Directory Users - Teradata Database

Teradata Database Security Administration

Product
Teradata Database
Release Number
16.10
Release Date
June 2017
Content Type
Administration
Security
Publication ID
B035-1100-161K
Language
English (United States)

You cannot map an IP filter to a directory user. To apply IP filter restrictions to a directory user, you must:

  1. In a tdatIPFilterMember attribute for the filter, enter the DN of one of the following:
    • tdatUser object to which the directory user is mapped
    • the tdatUsers container object (applies the filter to all tdatUser objects)
  2. Directory users inherit the IP restrictions that apply to the tdatUser object to which they are mapped. If a directory user is not mapped to a tdatUser object, no IP restrictions apply. See Mapping Directory Users to Database Users.
Directory-based IP filters have no effect until you enable them in the system. See Enabling Directory-Based IP Restrictions with the ipdir2bin Utility.