Archives of the TeradataForum

Message Posted: Fri, 31 Mar 2006 @ 10:36:12 GMT

	<Prev	Next>		<<First	<Prev	Next>	Last>>

kumar.bhola wrote:

First, you'll need to edit the TdgssUserConfigFile.xml file to identify the AD server. For example:

     LdapServerName="k1"
     LdapServerPort="389"
     LdapServerRealm="k1dns"

     LdapSystemFQDN="cn=end2end,cn=tdat,ou=testing,dc=k1dns,dc=ncr,dc=com"
                     LdapBaseFQDN="dc=k1dns,dc=ncr,dc=com"

(Obviously these values will depend on your site's specific directory entries.)

Then you'll need to run the tdgss configuration utility. (Hint: run tdgssconfig with the -h option to discover the correct parameters.)

Last, run gtwcontrol to turn on external authentication. (Hint: Again, use the -h option for help. Use the -d option to display current settings. Use the -a option to turn on external authentication.) You may also need to turn off the append domain name option in gtwcontrol. (I have it off on my system.)

There you have it. Now that your Teradata server is configured to use ldap authentication, you can easily test it using the tdsbind command. For example:

     C:\Documents and Settings\Administrator>tdsbind -u musim0 -w mySecretPassword#1
        LdapBaseFQDN: dc=k1dns,dc=ncr,dc=com
      LdapSystemFQDN: cn=end2end,cn=tdat,ou=testing,dc=k1dns,dc=ncr,dc=com
      LdapServerName: k1
      LdapServerPort: 389
     LdapServerRealm: k1dns

                FQDN: CN=musim0,CN=Users,DC=K1DNS,DC=NCR,DC=COM
                GUID: bad6d22a-fcce-bc4b-8f9a-176674ed729f
      Audit trail ID: AXLLNEKX2Z04EXD20C3THJ1LST2
            Profiles: profile_production_tpcd
               Users: musim0

Of course, this assumes you have the necessary entries already in the directory. Administration of your Active Directory server is a bigger subject than I'm willing to include in this email.

	<Prev	Next>		<<First	<Prev	Next>	Last>>