16.10 - Removing a NegotiatedMechanism from TDNEGO - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

To remove a NegotiatedMechanism:

  • Edit TdgssUserConfigFile.xml and change Enable="yes" to Enable="no". For example:
    <NegotiatedMechanism ObjectId="1.3.6.1.4.1.191.1.1012.1.1.9" Enable="no"/>
    Do not remove all of the NegotiatedMechanisms from TDNEGO. TDNEGO has NegotiationSupported set to yes, so it must have at least one NegotiatedMechanism ObjectId set; otherwise, an error is reported by the run_tdgssconfig executable.

    If you want to disable TDNEGO, see Disabling TDNEGO.

  • Run the run_tdgssconfig command to enable the change.
  • Run tpareset (on Teradata Database nodes only).

For specific steps on editing the configuration, see: Changing the Configuration on Teradata Database Nodes.