Using the External Authentication Controls - Advanced SQL Engine - Teradata Database

Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.05
17.00
Published
September 2020
Language
English (United States)
Last Update
2021-01-23
dita:mapPath
ied1556235912841.ditamap
dita:ditavalPath
lze1555437562152.ditaval
dita:id
B035-1100
lifecycle
previous
Product Category
Teradata Vantageā„¢
Teradata Vantage provides the following methods to control external authentication:
  • The DBSControl utility controls external authentication for all users.
  • The Gateway Control utility controls external authentication for users that log on through a particular gateway or host group.
For a host group:
  • If either the DBSControl or Gateway Control utility is set to disable external authentication, external authentication is disabled. Users entering through that gateway cannot be externally authenticated.
  • If either the DBSControl or Gateway Control utility is set to allow only external authentication, users entering through that gateway can only be authenticated externally. Setting either of these controls to allow only external authentication also prevents mainframe connections unless the TDP is also set up for external authentication.
You can also use the Database Window interface, or comparable command-line interfaces to the Console Subsystem (CNS), such as cnsterm and cnstool, to manage external authentication. The SET EXTAUTH command toggles the same internal control switch used by the DBSControl utility. You can use the GET EXTAUTH command to check whether or not external authentication is enabled.

For information on DBSControl, Gateway Control, Database Window and starting the utilities, see Teradata Vantageā„¢ - Database Utilities , B035-1102 .