16.10 - Adding Identity Map and Identity Search Elements to the LdapConfig - Teradata Database

Teradata Database Security Administration

Product
Teradata Database
Release Number
16.10
Release Date
June 2017
Content Type
Administration
Security
Publication ID
B035-1100-161K
Language
English (United States)

You must add at least 1 Identity Map or Identity Search element to the <Canonicalizations> subsection of the <LdapConfig> to assist LDAP in finding users. The system considers the canonicalizations in the order they appear in the configuration file.

  1. Create the needed <Identity Map> and <Identity Search> elements. See the topics beginning with Working with Directory User Identification Options.
  2. Add the <Identity Map> and <Identity Search> elements to <Canonicalizations> section, for example:
    <Canonicalizations>
            <IdentitySearch
                Ref="svc.div1root"
                Pattern="(.+)@td.teradata.com"
                Base="dc=td,dc=teradata,dc=com"
                Filter="(uid=${1})"
                DatabaseName="div1_${1}"
                BindName="dn:${result}"/>
            <IdentitySearch
                ...
    />
    </Canonicalizations>