16.10 - Sign-on As (Kerberos or LDAP Authentication) - Teradata Database

Teradata Database Security Administration

Teradata Database
Release Number
Release Date
June 2017
Content Type
Publication ID
English (United States)
  1. A user logs on to Teradata Database with a domain username that matches a Teradata Database username, and a domain password. The default mechanism, or the mechanism named in the logon, defines the external agent that authenticates the user.

    See Logging on Using Sign-on As.

    Sign-On As using Kerberos authentication (KRB5 or SPNEGO mechanism) is usable only from Windows clients.
  2. The authenticating agent forwards the user credentials to the database.
  3. The database authorizes privileges associated with the matching database username.
You must create users and grant them database privileges before the system can authenticate and authorize them. See Creating Users and Granting Privileges.