16.10 - Sign-on As (Kerberos or LDAP Authentication) - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K
  1. A user logs on to Teradata Database with a domain username that matches a Teradata Database username, and a domain password. The default mechanism, or the mechanism named in the logon, defines the external agent that authenticates the user.

    See Logging on Using Sign-on As.

    Sign-On As using Kerberos authentication (KRB5 or SPNEGO mechanism) is usable only from Windows clients.
  2. The authenticating agent forwards the user credentials to the database.
  3. The database authorizes privileges associated with the matching database username.
You must create users and grant them database privileges before the system can authenticate and authorize them. See Creating Users and Granting Privileges.