Prerequisites

1. 1Install the Teradata Parallel Transporter utilities and set the environment variables.
2. 2Ensure that you have access to the Secure Agent directory that contains the success and error files. This directory path must be the same on each Secure Agent machine in the runtime environment. The Teradata JDBC driver is packaged with the Secure Agent. When you install the Secure Agent, the JDBC driver is installed and the JDBC jars are copied to the Secure Agent machine.
3. 3Configure the authentication prerequisites to connect to a Teradata database. You can configure Native, LDAP, or KRB5 authentication. Keep the authentication details handy based on the authentication type that you want to use.

Teradata Parallel Transporter Utilities

• •Teradata Parallel Transporter Base
• •Teradata Parallel Transporter Stream Operator
• •Teradata CLIv2
• •Teradata Generic Security Services
• •Shared ICU Libraries for Teradata

Prepare for Kerberos authentication

• •You can't use the Hosted Agent or serverless runtime environment.
• •Ensure that the Secure Agent and database server that you use are registered in the KDC server.
• •You can't add more than one KDC to a krb5.conf file.
• •Consider the following guidelines to generate a credential cache file:
• - On Linux, you can generate a credential cache file for more than one Kerberos principal user in a connection. However, you can use only one Kerberos principal user within a mapping.
• - On Windows, you can't generate a credential cache file for more than one Kerberos principal user in a connection.

Configuring the Kerberos authentication

1. 1To configure the Java Authentication and Authorization Service configuration file (JAAS), perform the following tasks:
1. aCreate a JAAS configuration file on the Secure Agent machine.
2. bAdd the following entries to the JAAS configuration file:
JDBC_DRIVER_01 {
com.sun.security.auth.module.Krb5LoginModule required
useTicketCache=true;
};
Note: Ensure that you specify each key-value pair on a separate line.
2. 2To configure the krb5.conf file, perform the following steps:
1. aCreate a krb5.conf file on the Secure Agent machine.
2. bAdd the details of the Key Distribution Center (KDC) and admin server to the krb5.conf file in the following format:
[libdefaults]
default_realm = <Realm name>
forwardable = true
ticket_lifetime = 24h

[realms]
<REALM NAME> = {
kdc = <Location where KDC is installed>
admin_server = <Location where KDC is installed>
}
[domain_realm]
<domain name or host name> = <Domain name or host name of Kerberos>
<domain name or host name> = <Domain name or host name of Kerberos>
3. 3To set the environment variables on the Secure Agent machine, complete the following steps:
• - setenv KRB5CCNAME <Absolute path and file name of the credentials cache file>
• - setenv KRB5_CONFIG <Absolute path of the Kerberos configuration file>\krb5.conf
• - setenv JAASCONFIG <Absolute path of the JAAS config file>\<File name>.conf
4. 4Restart the Secure Agent.
5. 5To generate the credential cache file on the Secure Agent machine and use Kerberos authentication to connect to Teradata, perform the following steps:
1. aOn the Secure Agent machine, run the following command and specify the Teradata user name and realm name:
Kinit <user name>@<realm_name>
2. bOptionally, when you connect to Teradata databases on Linux, you can run the following command to generate the credential cache file with the specified file name and directory on the Secure Agent machine:
Kinit -c <Directory and file name where you want to create the credential cache> <user name>@<realm_name>
3. cWhen prompted, enter the password for the Kerberos principal user.
6. 6Add the KRB5_CONFIG, KRB5CCNAME, and JAASCONFIG properties in the Kerberos Artifacts Directory field in the Teradata connection.
For example, add the properties in the following format:
KRB5_CONFIG=<Absolute path of the Kerberos configuration file>\krb5.conf,KRB5CCNAME=<Absolute path of the credential cache file>/<File name>,JAASCONFIG=<Absolute path of the JAAS config file>\<File name>.conf
Note: Ensure that you separate each key-value pair with a comma.

Setting environment variables

• •Using a Bourne shell:
export LD_LIBRARY_PATH="/opt/teradata/client/15.10/lib64:${LD_LIBRARY_PATH}"
• •Using a C shell:
LD_LIBRARY_PATH="/opt/teradata/client/15.10/lib64:${LD_LIBRARY_PATH}