Support for authentication, encryption, and privacy are provided by .NET TeraGSS.  This assembly is installed with the .NET Data Provider for Teradata as a separate assembly called Teradata.Net.Security.Tdgss.dll.

Authentication Mechanisms

The authentication mechanisms supported by .NET TeraGSS are:

• JWT (JSON Web Token)
• LDAP (Lightweight Directory Access Protocol)
• SPNEGO (Simple and Protected GSSAPI Negotiation). SPNEGO is utilized to negotiate with the Teradata Gateway to use Microsoft Kerberos on Windows or Kerberos on Linux or MP-RAS.
• TD2 (Teradata Method 2)
• TDNEGO (Teradata Negotiation). TDNEGO is utilized to negotiate with the Teradata Gateway to select an appropriate mechanism.

These mechanisms must also be supported and enabled on the Teradata Server.

Making .NET TeraGSS Configuration Changes

The TdgssUserConfigFile.xml can be modified to change authentication mechanism properties.  This file is not shared with any other Teradata Tools and Utilities product. Changes to other copies of the TdgssUserConfigFile.xml for C/C++ or Java applications do not affect .NET TeraGSS.

The TeraGSS configuration files are contained in the directory

     <Installation Directory>\Config

Steps to change the .NET TeraGSS configuration are:

1. In a Command Prompt window navigate to the directory that provides access to the TdgssUserConfigFile.xml file. For example

        cd C:\Program Files\Teradata\NET Data Provider for Teradata\12.00.00.00\Config
   

2. Make a backup copy of the TdgssUserConfigFile.xml and save it according to your standard backup procedures.
3. Open a valid text editor, such as Notepad, and bring up a working copy of the .NET TeraGSS User Configuration file:

        notepad TdgssUserConfigFile.xml
   

4. Edit the properties in the file by deleting the old values and entering new values for the properties you wish to modify.  Refer to the Security Administration manual for details about the authentication mechanism properties.

   Note
   Most mechanism properties work best using their factory preset values. Make sure of your reason for wanting to change a property value before you proceed with the edit.

5. Run the TdgssNetConfig.exe tool to create the .NET TeraGSS extensions assembly (Teradata.Net.Security.TdgssExtensions.dll):

        TdgssNetConfig.exe /Schema:. /Xml:. /Out:.
   

   Schema argument specifies the path to the SDKExtensions.xsd file. Xml argument specifies the path to the TdgssUserConfigFile.xml file. Out argument specifies the output path for the .NET TeraGSS extensions assembly. Refer to the Security Administration manual for additional information on TdgssNetConfig tool.

6. Ensure that no applications are currently using a previous copy of the Teradata.Net.Security.TdgssExtensions.dll assembly.
7. Copy Teradata.Net.Security.TdgssExtensions.dll to your application directory or to the Global Assembly Cache.
8. Redeploy your application or distribute the updated copies of the Teradata.Net.Security.TdgssExtensions.dll to Windows client machines that require the same changes.
9. Restart your application.  The changes will take effect the first time the Teradata.Net.Security.Tdgss.dll is loaded, which loads the Teradata.Net.Security.TdgssExtensions.dll assembly if it is deployed in the application directory or Global Assembly Cache.