16.10 - LdapBaseFQDN - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

The LdapBaseFQDN property specifies the FQDN of a directory object that contains directory users and groups, and provides the search base for locating user and group objects.

This property is deprecated in favor of the LdapGroupBaseFQDN and LdapUserBaseFQDN properties.
  • If you set the value of either LdapGroupBaseFQDN or LdapUserBaseFQDN (preferred), the value overrides the value of LdapBaseFQDN.
  • If you do not set the values of either LdapGroupBaseFQDN or LdapUserBaseFQDN, the system uses the value of LdapBaseFQDN.

Valid Settings

  • “” (default), that is, the property does not specify a search base
  • The FQDN of an object that contains all directory users and groups (not recommended)

Supporting Mechanisms for LdapBaseFQDN

Mechanisms that are not listed in the table do not support this property. The Property Editable column indicates if the setting for a property may be edited.
Mechanism Property Editable?
KRB5 May Be Edited
SPNEGO
LDAP
LdapSystemFQDN appears by default only in the LDAP mechanism. If the AuthorizationSupported=yes for KRB5 or SPNEGO, you can add LDAPSystemFQDN to the TdgssUserConfigFile.xml for the mechanism and specify a value. See Changing the TDGSS Configuration.

Editing Guidelines

  • If the property is set to the default “”, and the directory is Active Directory, ADAM, AD LDS, or any uncertified LDAPv3-compliant directory, you must do the following:
    • For LDAP authentication only, configure the LdapUserBaseFQDN.
    • For LDAP authorization, configure the LdapGroupBaseFQDN.
  • Edit this property on database nodes and on the Unity server, if used. Also see Coordinating Mechanism Property Values.