DataStax Support Forums » Topic: Problem connecting to Agents with Simple Security turned on

DataStax Support Forums » Topic: Problem connecting to Agents with Simple Security turned on http://www.datastax.com/support-forums/topic/problem-connecting-to-agents-with-simple-security-turned-on Software, Support, and Training for Apache Cassandra en-US Sat, 25 May 2013 21:40:04 +0000 http://bbpress.org/?v=1.0.3 <![CDATA[Search]]> q http://www.datastax.com/support-forums/search.php ryoudelman on "Problem connecting to Agents with Simple Security turned on" http://www.datastax.com/support-forums/topic/problem-connecting-to-agents-with-simple-security-turned-on#post-2414 Tue, 26 Jun 2012 19:55:34 +0000 ryoudelman 2414@http://www.datastax.com/support-forums/ User error on my part. I didn't realize the agent keystore was specific to the opscenter install. Once I corrected that the agent could properly communicate and opscenter could authenticate. Thanks. ryoudelman on "Problem connecting to Agents with Simple Security turned on" http://www.datastax.com/support-forums/topic/problem-connecting-to-agents-with-simple-security-turned-on#post-2411 Tue, 26 Jun 2012 18:48:33 +0000 ryoudelman 2411@http://www.datastax.com/support-forums/ Yes, i can do a list on the rollups60 cf and get the first hundred rows of data back. tupton on "Problem connecting to Agents with Simple Security turned on" http://www.datastax.com/support-forums/topic/problem-connecting-to-agents-with-simple-security-turned-on#post-2410 Tue, 26 Jun 2012 18:38:55 +0000 tupton 2410@http://www.datastax.com/support-forums/ Listing the column families does not necessarily guarantee that authorization is set up correctly. Can you read/write to those column families via the cli? Changes to access.properties also require Cassandra to be restarted to take effect, if you haven't already done so. EDIT: access.properties does *not* require a restart; it is read on every access. ryoudelman on "Problem connecting to Agents with Simple Security turned on" http://www.datastax.com/support-forums/topic/problem-connecting-to-agents-with-simple-security-turned-on#post-2408 Tue, 26 Jun 2012 18:30:42 +0000 ryoudelman 2408@http://www.datastax.com/support-forums/ Interesting enough I can use cassandra-cli and authenticate as myUser. I can then do a list on the columnfamilies under the OpsCenter keyspace. ryoudelman on "Problem connecting to Agents with Simple Security turned on" http://www.datastax.com/support-forums/topic/problem-connecting-to-agents-with-simple-security-turned-on#post-2406 Tue, 26 Jun 2012 17:39:39 +0000 ryoudelman 2406@http://www.datastax.com/support-forums/ I have a poc cluster setup which uses the basic file security. I am seeing the following error in my logs and the agent is unable to report in: 2012-06-26 13:33:02-0400 [] Error fetching metric data: Traceback (most recent call last): Failure: telephus.cassandra.ttypes.InvalidRequestException: InvalidRequestException(why='#<User myUser groups=[]> does not have permission READ for /cassandra/keyspaces/OpsCenter/rollups60' I tried modifying my access.properties file to include the column families but am still getting the error: <modify-keyspaces>=myUser # Access to Keyspace1 (add/remove column families, etc). #Keyspace1.<ro>=jsmith,Elvis Presley #Keyspace1.<rw>=dilbert OpsCenter.<rw>=myUser # Access to Standard1 (keyspace Keyspace1) #Keyspace1.Standard1.<rw>=jsmith,Elvis Presley,dilbert OpsCenter.rollups60.<rw>=myUser OpsCenter.events.<rw>=myUser OpsCenter.pdps.<rw>=myUser OpsCenter.events-history.<rw>=myUser OpsCenter.rollsups300.<rw>=myUser OpsCenter.rollsups72000.<rw>=myUser OpsCenter.events-timeline.<rw>=myUser OpsCenter.settings.<rw>=myUser