Using `dsetool` with Kerberos-enabled Cluster

You must enable dsetool commands to use Kerberos authentication with one of the following options:

Using the ~/.dserc file

Create or edit the ~/.dserc file in your DataStax Enterprise home directory and add the following entries:

sasl_protocol=<service_name>
login_config=<path_to_login_config>

Command line options

Specify the service name and Java Authentication and Authorization Service (JAAS) configuration file on the command line:

-Ddse.sasl.protocol=<user>@realm
-Djava.security.auth.login.config=<file_name>

where:

<service_name> is the service name component of the service_principal that is defined in the dse.yaml file

<path_to_login_config> is the JAAS configuration file with the following options declared in it:

DseClient {
            com.sun.security.auth.module.Krb5LoginModule required
            useTicketCache=true
            renewTGT=true;
        };

Give Feedback