Does TDWallet support Non-Interactive mode?
I have been trying to insert few keys in TDWallet using Shell Script but It does not seems to be working.
After some research I have found we can create users using Expect Automation tool for Linux and was able to automate using Expect and Python script. But I am looking for TDWallet direct support for non-interactive mode.
Will this be the feature for TDWallet 15 or 15.10? or is it available in 14.10 release?
No, Teradata Wallet does not support non-interactive mode for security reasons. There are no plans to change this.
Expect is the recommended workaround.
Everytime a server is rebooted, the wallet password needs to be re-entered using "suppwd". Is there a solution to this?
cr255014 - Are you using expect for this, too?
If you’d rather not has to supply the wallet password after a reboot, you can use Teradata Wallet’s saved-key protection scheme. To use it, add items with “tdwallet addsk” instead of using “tdwallet add”. To learn more about Teradata Wallet’s protection schemes, issue “tdwallet help security”.
(Sorry for the delayed reply, but I just discovered that your question never received any response.)
I hope this helps!
The main documentation for Teradata Wallet is available online; from within the tdwallet utility just enter "help" to get started.
i can find bits and pieces of information about tdwallet spread across multiple documents (ODBC, Unity Connector, Aster) but no document that explains TD Wallet and it's complete functionality/compatibility. Maybe i'm not searching for the right thing on docs.teradata.com....
at any rate, i'm on a windows server and i tried running "tdwallet addsk test_string" and i got "addsk is not a valid subcommand". this is version 16.20.00.07. "tdwallet help security" is not very helpful, am wondering if addsk is just not available in windows?
Your inference is correct. The saved-key protection scheme is not available in Windows.
See this very long thread for a good overview and answers to a number of questions.
thanks so much Fred! would have saved me a ton of time if i could have read that in a technical document instead of piecing it together from forum posts.