Enabling basic authentication in DataStax Distribution of Apache Cassandra in GCP

A primer for enabling authentication in DDAC in GCP.

A primer for enabling authentication in the DataStax Distribution of Apache Cassandra™ (DDAC) in GCP.
Note: For more information, see the DDAC Security Guide.

The default DDAC deployment has the authenticator option called AllowAllAuthenticator. To change to a secure authenticator:

  1. On one of the nodes, run the following command:
    ALTER KEYSPACE "system_auth" WITH REPLICATION = {'class' : 'NetworkTopologyStrategy', 'dc0' : 3};
    Note: Make sure dc0 is replaced with the datacenter that you specified during configuration. (Default: dc0)
  2. Run the following command on all nodes:
    nodetool repair system_auth
  3. Stop cassandra.
  4. Modify the /usr/share/dse/conf/cassandra.yaml file on all nodes:
    "authenticator: PasswordAuthenticator" 
  5. Start cassandra.
  6. Run the following command:
    -u cassandra -p cassandra ddac-pot-3-ddac-seed-0-s6kk