The driver supports Kerberos authentication. This authentication method can take advantage of the user name and password maintained by the operating system to authenticate users to the database or use another set of user credentials specified by the application. Once the identity of the user has been verified by Kerberos, the mechanism proceeds using the same username as the Teradata username.

The Kerberos method requires knowledge of how to configure your Kerberos environment. This method supports both KRB5 and KRB5C implementations. In the KRB5 implementation, the driver uses Kerberos on Windows clients working with Windows servers if the server is V2R6.0. If the server is pre-V2R6.0, the driver uses Kerberos Compatibility on Windows clients working with Windows servers.

To configure the driver to use Kerberos authentication:
  • Set the Security Mechanism (SecurityMechanism) to KRB5 or KRB5C.
  • Set the DBC Name or Alias (DBCName) option to specify the IP address or the DBC name of the Teradata server to which you want to connect.
  • Set the Port Number (PortNumber) option to specify the port number of the server listener. The default is 1025.
  • Set the Default Database (Database) option to specify the name of the database to which you want to connect.
  • Set the Authentication UserID (AuthenticationUserID) option to specify the Kerberos user ID connecting to the service.
  • Set the Realm (Realm) option to specify the Kerberos domain. (The equivalent connection string attribute is AuthenticationDomain.)

The following examples show the connection information required to establish a connection using Kerberos authentication.

Connection string

DRIVER=DataDirect 8.0 Teradata;SecurityMechanism=KRB5;
DBCName=myserver;PortNumber=1025;DatabaseName=mydb;AuthenticationUserID=jsmith;
Realm=sampledomain;

odbc.ini

[Teradata]
Driver=ODBCHOME/lib/xxtera28.yy
...
DBCName=myserver
...
PortNumber=1025
...
SecurityMechanism=KRB5
...
DatabaseName=mydb
...
AuthenticationUserID=jsmith
...
Realm=sampledomain
...