Using dsetool with Kerberos enabled cluster

You must enable dsetool commands to use Kerberos authentication.

Use one of these options:

Using the ~/.dserc file

Create or edit the ~/.dserc file in your DataStax Enterprise home directory and add the following entries:

sasl_protocol=<service_name>
login_config=<path_to_login_config>
Command line options

Specify the service name and JAAS configuration file on the command line:

-Ddse.sasl.protocol=<service_name>
-Djava.security.auth.login.config=<path_to_login_config>

where:

  • <service_name> is the service name component of the service_principal that is defined in the dse.yaml file

  • <path_to_login_config> is the JAAS configuration file with the following options declared in it:

    DseClient {
                com.sun.security.auth.module.Krb5LoginModule required
                useTicketCache=true
                renewTGT=true;
            };

Was this helpful?

Give Feedback

How can we improve the documentation?

© 2024 DataStax | Privacy policy | Terms of use

Apache, Apache Cassandra, Cassandra, Apache Tomcat, Tomcat, Apache Lucene, Apache Solr, Apache Hadoop, Hadoop, Apache Pulsar, Pulsar, Apache Spark, Spark, Apache TinkerPop, TinkerPop, Apache Kafka and Kafka are either registered trademarks or trademarks of the Apache Software Foundation or its subsidiaries in Canada, the United States and/or other countries. Kubernetes is the registered trademark of the Linux Foundation.

General Inquiries: +1 (650) 389-6000, info@datastax.com