TDGSS TeradataKeyTab Property | Teradata Vantage - TeradataKeyTab - Advanced SQL Engine - Teradata Database

Security Administration
Product
Advanced SQL Engine
Teradata Database
Release Number
17.05
17.00
Published
September 2020
Language
English (United States)
Last Update
2021-01-23
dita:mapPath
ied1556235912841.ditamap
dita:ditavalPath
lze1555437562152.ditaval
dita:id
B035-1100
lifecycle
previous
Product Category
Teradata Vantage™

This property defines the location for the storage of Kerberos keytab files on Vantage nodes and on Unity servers.

Default Property Value

TDGSS initially sets the value of this property to /etc/teradata.keytab, the default storage location, for supporting mechanisms.

Valid Settings

Any valid Linux file location.

Editing Guidelines

The TeradataKeyTab value in KRB5 applies to all Kerberos authentication, including logons that use the SPNEGO mechanism.

Coordinate the value of this property with the location of the keytab file specified when setting up Kerberos authentication. Use the default file location unless site security policy requires a different location. See Configuring Teradata Vantage and Unity Servers for Kerberos Authentication.

This property appears only in the library configuration file for the KRB5 mechanism. You must manually add it to the TDGSS configuration file before you can change the property value. See About Editing Configuration Files.

The Linux user under which Teradata Vantage runs must own and have read access to the keytab file. If you specify a custom (non-default) file location, you must grant read access permission for the file to the Vantage Linux user.