16.10 - Changing the Configuration on Teradata Database Nodes and Unity Server - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

On the Teradata Database:

  1. If you install Kerberos in a non-standard location, you must edit the TdgssUserConfigFile.xml. Perform steps 1 through 3 of Changing the TDGSS Configuration.
  2. The TdgssUserConfigFile.xml does not contain a KRB5 mechanism by default. Instead, go to the TdgssLibraryConfigfile.xml (located in the same directory as the TdgssUserConfigFile.xml), copy the Linux version of the KRB5 mechanism, and paste it into the TdgssUserConfigFile.xml.
    You only need to make a copy of the KRB5 mechanism because you are customizing the Kerberos configuration (in this case you are customizing for a non-standard location). If you using the default configuration of Kerberos you do not need to perform this step.
  3. After copying the Linux version of KRB5 into the TdgssUserConfigFile.xml, note that the default path to the library is:
    <RequiredLibrary Path="/usr/lib64/libgssapi_krb5.so"/>

    On a Teradata Database node:

    1. Edit the path value for Linux KRB5 in the TdgssUserConfigFile.xml, to show the new (non-standard) file location used on your system.
    2. Run the run_tdgssconfig utility to update the TDGSSCONFIG GDO.
      /opt/teradata/tdgss/bin/run_tdgssconfig
    3. Run tpareset to activate the changes to the TDGSS configuration.
      tpareset -f “use updated TDGSSCONFIG GDO”
    You only need to perform this procedure once from any node in a Teradata Database system. Running the run_tdgssconfig tool distributes the change to all database nodes.

    On Unity servers: See Teradata Unity Installation, Configuration, and Upgrade Guide for Customers (B035-2523) for Unity configuration information.