Using dsetool with Kerberos enabled cluster

Steps to enable dsetool to use Kerberos authentication.

You must enable dsetool commands to use Kerberos authentication.

Use one of these options:

Using the ~/.dserc file
Create or edit the ~/.dserc file in your DataStax Enterprise home directory and add the following entries:
sasl_protocol=service_name
login_config=path_to_login_config
Command line options
Specify the service name and JAAS configuration file on the command line:
-Ddse.sasl.protocol=user@realm
-Djava.security.auth.login.config=file_name
where:
  • service_name is the service name component of the service_principal that is defined in the dse.yaml file
  • path_to_login_config is the JAAS configuration file with the following options declared in it:
    DseClient {
                com.sun.security.auth.module.Krb5LoginModule required
                useTicketCache=true
                renewTGT=true;
            };