Setting permissions to run the DataStax Agent as the DSE user
Ensure that the DataStax Agent tarball can run as the DSE user.
If you install the DataStax Agent from a tarball, you must manually configure the
Agent to run as the same DataStax Enterprise (DSE) user and set permissions for this
user.
Note: When DSE is installed, it creates a
cassandra
user in
the database and runs as this user. It also creates a cassandra
user in the operating system. Do not use the cassandra
user in
production for either the database or operating system. Failing to do so is a
security risk.Prerequisites
Feature functionality | Permissions required |
---|---|
General Agent functionality | Read permission to cassandra.yaml |
Configuring a cluster | Read/write permissions to configuration directories and files. |
Backup and restore |
|
Directory/File | Location |
---|---|
cassandra.yaml |
See Configuration directories and files below. |
Configuration directories and files |
|
Data directories | Default: /var/lib/cassandra Note: Location
is user-configurable; set in
cassandra.yaml . |
Commit log archiving script |
|
Procedure
To set up the umask:
- Open a terminal.
-
To give read/write permissions for new tables and data, edit the appropriate
shell file for the DataStax Enterprise environment:
File Location dse-env.sh
- /etc/dse/
- install_location/conf/
cassandra-env.sh
- /etc/dse/cassandra
- install_location/conf
-
Add the command
umask 002
to the top of the file.Setting the umask to 002 is required because Cassandra creates new directories or files as 0700 by default, which does not grant read or write permissions.
umask 002