Using dsetool with Kerberos enabled cluster

You must enable dsetool commands to use Kerberos authentication.

Use one of these options:

Using the ~/.dserc file

Create or edit the ~/.dserc file in your DataStax Enterprise home directory and add the following entries:

sasl_protocol=<service_name>
login_config=<path_to_login_config>

Command line options

Specify the service name and JAAS configuration file on the command line:

-Ddse.sasl.protocol=<service_name>
-Djava.security.auth.login.config=<path_to_login_config>

where:

<service_name> is the service name component of the service_principal that is defined in the dse.yaml file

<path_to_login_config> is the JAAS configuration file with the following options declared in it:

DseClient {
            com.sun.security.auth.module.Krb5LoginModule required
            useTicketCache=true
            renewTGT=true;
        };

Give Feedback