Opscenter and Cassandra running with authentication

DataStax Support Forums » OpsCenter

[sticky]

Opscenter and Cassandra running with authentication

(8 posts) (5 voices)

Started 4 months ago by lukk
Latest reply from heskech
This topic is resolved

Tags:

lukk
Member

I'm running a cassandra cluster with authentication enabled (authenticator: org.apache.cassandra.auth.SimpleAuthenticator).

If I disable authentication in cassandra (switching to org.apache.cassandra.auth.AllowAllAuthenticator) OpsCenter works fine.

If authentication is enabled OpsCenter can't connect to the cluster:

From the logs (DEBUG):

Traceback (most recent call last):
Failure: telephus.cassandra.c08.ttypes.InvalidRequestException: InvalidRequestException(why='You have not logged in')

My question is:
Does OpsCenter support cluster with authentication enabled ?
I didn't found traces of that in opscenterd.conf.
If yes, where can be configured ?

many thanks.

Posted 4 months ago #
nickmbailey
Administrator

You can enable authentication with SimpleAuthenticator by adding the following lines the '[cassandra]' section of opscenterd.conf:

'username = <username>'
'password = <password>'

Posted 4 months ago #
lukk
Member

Is it possible to specify authentication even for the JMX connection?
Where do I find a complete documentation for the opscenterd.conf?

Posted 4 months ago #
nickmbailey
Administrator

Yes you can specify authentication for the jmx connection that the agents use by setting those same settings under the '[jmx]' section of opscenterd.conf.

Unfortunately right now there is not complete documentation for opscenterd.conf, I will make a note that some of these items need to be documented more clearly.

Posted 4 months ago #
secu
Member

This topic should be flagged as sticky.

Posted 2 months ago #
heskech
Member

Is it possible to have OpsCenter pass additional credentials - to support an Authenticator other than SimpleAuthenticator?

Posted 2 months ago #
thobbs
Moderator

At this time, it's not possible to supply credentials in a different format. I've opened a ticket to allow an arbitrary set of key-value pairs to be used for the Thrift credentials. Would that work for you?

Posted 2 months ago #
heskech
Member

Yes, that would work, but it's not urgent. Thanks.

Posted 2 months ago #

RSS feed for this topic

Reply

You must log in to post.