com.datastax.driver.auth

Class DseAuthProvider

java.lang.Object

com.datastax.driver.auth.DseAuthProvider

All Implemented Interfaces:

AuthProvider

public class DseAuthProvider
extends Object
implements AuthProvider

AuthProvider which supplies authenticator instances for clients to connect t DSE clusters secured with Kerberos The SASL protocol name defaults to "dse"; should you need to change that it can be overridden using the dse.sasl.protocol system property.

Keytab and ticket cache settings are specified using a standard JAAS configuration file. The location of the file can be set using the java.security.auth.login.config system property or by adding a login.config.url.n entry in the java.security properties file.

See the following documents for further details on the JAAS Login Configuration File and the JAAS Authentication Tutorial for more on JAAS in general.

Authentication using ticket cache

Run kinit to obtain a ticket and populate the cache before connecting. JAAS config:

 DseClient {
   com.sun.security.auth.module.Krb5LoginModule required
     useTicketCache=true
     renewTGT=true;
 };
 

Authentication using a keytab file

To enable authentication using a keytab file, specify its location on disk. If your keytab contains more than one principal key, you should also specify which one to select.

 DseClient {
     com.sun.security.auth.module.Krb5LoginModule required
       useKeyTab=true
       keyTab="/path/to/file.keytab"
       principal="user@MYDOMAIN.COM";
 };
 

To connect to clusters using internal authentication, use the standard method for setting credentials. eg:

 Cluster cluster = Cluster.builder()
                          .addContactPoint(hostname)
                          .withCredentials("username", "password")
                          .build();
 

Field Summary

Fields inherited from interface com.datastax.driver.core.AuthProvider

NONE

Constructor Summary

Constructors

Constructor and Description
DseAuthProvider()

Method Summary

Modifier and Type	Method and Description
Authenticator	newAuthenticator(InetSocketAddress host) The Authenticator to use when connecting to host

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DseAuthProvider

public DseAuthProvider()

Method Detail

newAuthenticator

public Authenticator newAuthenticator(InetSocketAddress host)
                               throws AuthenticationException

Description copied from interface: AuthProvider

The Authenticator to use when connecting to host

Specified by:

newAuthenticator in interface AuthProvider

Parameters:

host - the Cassandra host to connect to.

Returns:

The authentication implementation to use.

Throws:

AuthenticationException