Providing Credentials for CQLSH
Provide a username and password to connect to a node on an authentication enabled DataStax Enterprise cluster using credentials:
-
Stored in the
cqlshrc
file -
Specified by command line options
Debugging cqlsh authentication
If problems occur while authenticating, then use the --debug option to show CQL shell settings and connection details.
Procedure
-
Locate the
cqlshrc
file. The location of this file depends on the type of installation:-
Package installations:
/etc/dse/cassandra
-
Tarball installations:
<installation_location>/resources/cassandra/conf
-
-
Set credentials in the
cqlshrc
file:-
Create or modify the
~/.cassandra/cqlshrc
file by adding an[authentication]
section with ausername
andpassword
.[authentication] username = <role_name> password = <password>
See
cqlshrc.sample
for an example. -
Save the file in
<$HOME>/.cassandra
directory. -
Set permissions on the file to prevent unauthorized access, because the password is stored in plain text.
chmod 440 <$HOME>/.cassandra/cqlshrc
-
Check the permissions on
<$HOME>/.cassandra/cqlshrc_history
to ensure that plain text passwords are not compromised.
-
-
On the command line:
-
Prompt for password
cqlsh -u <user_name>
-
No prompt
cqlsh -u <user_name> -p <password>
-