SET EXTAUTH - Advanced SQL Engine - Teradata Database

Database Utilities

Product
Advanced SQL Engine
Teradata Database
Release Number
17.00
Published
June 2020
Language
English (United States)
Last Update
2020-06-15
dita:mapPath
boh1556732696163.ditamap
dita:ditavalPath
lze1555437562152.ditaval
dita:id
B035-1102
lifecycle
previous
Product Category
Teradata Vantage™

Purpose

Controls whether Teradata Database users can be authenticated outside (external) of the Teradata Database software authentication system.

Syntax

SET EXTAUTH { OFF | ON | ONLY }
OFF
Rejects external authentication logons; traditional logons are accepted.
ON
Accepts both external authentication and traditional logons. This is the default.
ONLY
Accepts external authentication logons only; traditional logons are rejected.

Usage Notes

External authentication may eliminate the need for your application to declare or store a password on your client system.

To configure how the network allows or disallows traditional and new external authentication logons, see Gateway Control (gtwcontrol).

If you have scripts that depend on the deprecated SET SSO command, you should change them to use the SET EXTAUTH command.

The new setting is effective immediately.

To check the current setting, use GET EXTAUTH.

The SET EXTAUTH database command duplicates the functionality of the ExternalAuthentication setting in DBS Control. For more information on DBS Control, see DBS Control (dbscontrol).

For additional information on external authentication, see Teradata Vantage™ - Advanced SQL Engine Security Administration, B035-1100.

Example: Setting the system to accept only externally authenticated logons

This example sets the system to accept external authentication logons only.

set extauth only

The External Authentication mode has been set to ONLY.