16.10 - MechanismRank - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

The MechanismRank property defines the order of preference in which client applications offer mechanisms for user selection.

Default Property Values

  • TDNEGO = “10”
  • TD2 = “20”
  • KRB5 = “40”
  • SPNEGO = “65”
  • LDAP = “70”
  • PROXY = “80”

Valid Settings

The value for MechanismRank must be numeric.

Default MechanismRank values are for reference only and need not be in increments of 10. The system ranks values in order from low to high, with the lowest numbers having the highest preference.

Supporting Mechanisms for MechanismRank

TDNEGO supports MechanismRank. However, TDNEGO only looks at the mechanism rank of the mechanisms it is trying to negotiate: TD2, ldap, KRB5, and SPNEGO. For all other mechanisms, including TDNEGO itself, MechanismRank is not used.

Editing Guidelines

  • TDNEGO uses the MechanismRank property to determine the priority order of the mechanisms being negotiated.
  • For TDNEGO, this property can be set independently on the client and Teradata Database server. Note: The decision of which mechanism to select is attempted locally at both client and server. If all mechanism ranks are different on client and server, it is the ordering at the system where the decision is made that takes effect.