16.10 - Removing a NegotiatedMechanism from TDNEGO - Teradata Database

Teradata Database Security Administration

Product
Teradata Database
Release Number
16.10
Release Date
June 2017
Content Type
Administration
Security
Publication ID
B035-1100-161K
Language
English (United States)

To remove a NegotiatedMechanism:

  • Edit TdgssUserConfigFile.xml and change Enable="yes" to Enable="no". For example:
    <NegotiatedMechanism ObjectId="1.3.6.1.4.1.191.1.1012.1.1.9" Enable="no"/>
    Do not remove all of the NegotiatedMechanisms from TDNEGO. TDNEGO has NegotiationSupported set to yes, so it must have at least one NegotiatedMechanism ObjectId set; otherwise, an error is reported by the run_tdgssconfig executable.

    If you want to disable TDNEGO, see Disabling TDNEGO.

  • Run the run_tdgssconfig command to enable the change.
  • Run tpareset (on Teradata Database nodes only).

For specific steps on editing the configuration, see: Changing the Configuration on Teradata Database Nodes.