16.10 - Single Sign-on (Kerberos Authentication) - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K
  1. A user logs on to the network with a domain username that matches a Teradata Database username, and a domain password. Kerberos authenticates the user. The user can then access any applications and data that support Kerberos authentication, including Teradata Database.
  2. The user connects to Teradata Database without resubmitting a username and password, although the connection must specify the database name (tdpid) and the security mechanism that corresponds to the authenticating agent. See Logging on Using Single Sign-on.
  3. The authenticating agent for the network logon forwards the domain username to the database.
  4. The database authorizes the user with the database privileges available to the matching database username.