16.10 - Changing the Configuration on Teradata Database Nodes and Unity Server - Teradata Database

Teradata Database Security Administration

Teradata Database
Release Number
Release Date
June 2017
Content Type
Publication ID
English (United States)

On the Teradata Database:

  1. If you install Kerberos in a non-standard location, you must edit the TdgssUserConfigFile.xml. Perform steps 1 through 3 of Changing the TDGSS Configuration.
  2. The TdgssUserConfigFile.xml does not contain a KRB5 mechanism by default. Instead, go to the TdgssLibraryConfigfile.xml (located in the same directory as the TdgssUserConfigFile.xml), copy the Linux version of the KRB5 mechanism, and paste it into the TdgssUserConfigFile.xml.
    You only need to make a copy of the KRB5 mechanism because you are customizing the Kerberos configuration (in this case you are customizing for a non-standard location). If you using the default configuration of Kerberos you do not need to perform this step.
  3. After copying the Linux version of KRB5 into the TdgssUserConfigFile.xml, note that the default path to the library is:
    <RequiredLibrary Path="/usr/lib64/libgssapi_krb5.so"/>

    On a Teradata Database node:

    1. Edit the path value for Linux KRB5 in the TdgssUserConfigFile.xml, to show the new (non-standard) file location used on your system.
    2. Run the run_tdgssconfig utility to update the TDGSSCONFIG GDO.
    3. Run tpareset to activate the changes to the TDGSS configuration.
      tpareset -f “use updated TDGSSCONFIG GDO”
    You only need to perform this procedure once from any node in a Teradata Database system. Running the run_tdgssconfig tool distributes the change to all database nodes.

    On Unity servers: See Teradata Unity Installation, Configuration, and Upgrade Guide for Customers (B035-2523) for Unity configuration information.