Enable basic protection before configuring LDAP certificate properties. See Using Basic SSL or TLS Protection.
The Linux user under which Teradata Database runs (teradata) must have read access to the directory specified in the LdapClientTlsCACert property. For sites that configured this property before Release 14.0, the permission is granted automatically by a script upon upgrade to Release 14.0. For sites that configure this property on Release 14.0 or later, you must grant the permission manually. For permission requirements, see Working with OS-Level Security Options.