DataStax Luna — Support for Open-Source Apache Cassandra. Start a Free 30-Day Trial Now!

Jump to main content

Support
DataStax Home
Downloads

Learn
Drivers
Glossary
Try for free

About DSE Advanced Security
Security FAQs
Security checklists
Securing the environment
Configuring DSE Unified Authentication
Connecting to authentication enabled clusters
Managing roles
Authorizing access to database resources
Auditing activity
Transparent data encryption
Configuring SSL
Dynamically set LDAP Authenticator Connection Search Password

Can't find what you're looking for? Try searching other guides

DataStax 5.1 Security Guide Earlier DSE version Latest 5.1 patch: 5.1.22

About DSE Advanced Security
An overview of DataStax Enterprise security features.
Security FAQs
DataStax Enterprise security features frequently asked questions.
Security checklists
Lists of security measures required for protecting a DataStax Enterprise database.
Securing the environment
To fully protect your data, ensure that your network is secure and temporary files are secure.
Configuring DSE Unified Authentication
Detailed steps to set up authentication and authorization in a DataStax Enterprise environment.
Connecting to authentication enabled clusters
Setting up local or DSE managed JMX user authentication.
- About client connections
  After enabling DataStax Unified Authentication provide credentials in connection requests.
- Providing credentials with DSE tools
  Authentication works with any combination of DSE authentication, LDAP pass-through authentication, and Kerberos authentication.
- Providing credentials with nodetool
  Using nodetool with JMX authentication enabled.
- Providing credentials with JConsole
  How to use JConsole with authentication.
- Providing credentials with cqlsh
  Create a cqlshrc file to use credentials when launching a CQL shell session.
- Using dsetool with Kerberos enabled cluster
  Steps to enable dsetool to use Kerberos authentication.
- Using cqlsh with Kerberos or user authentication
  Configuration steps to use cqlsh with DataStax Unified Authentication.
- Loading data into a remote Kerberos enabled cluster
  Configure sstableloader with Kerberos to load data from an sstable into a remote DataStax Enterprise cluster with Kerberos enabled.
- Graph and gremlin-console
  Configure Kerberos authentication in the Graph remote.yaml.
- Running Spark jobs with Kerberos
  Spark jobs may be run against a Kerberos enabled DataStax Enterprise database.
Managing roles
Manage access to database objects using role-based access control (RBAC).
Authorizing access to database resources
Configure roles and assign permissions to manage access to database resources for authenticated users.
Auditing activity
Information about enabling and configuring data auditing in DataStax Enterprise.
Transparent data encryption
Configure transparent data encryption (TDE) on sensitive data stored in tables and in configuration files.
Configuring SSL
Securing data inflight for DataStax Enterprise components.
Dynamically set LDAP Authenticator Connection Search Password
Dynamically set LDAP Authenticator Connection Search Password.

Connecting to authentication enabled clusters

Setting up local or DSE managed JMX user authentication.

About client connections
After enabling DataStax Unified Authentication provide credentials in connection requests.
Providing credentials with DSE tools
Authentication works with any combination of DSE authentication, LDAP pass-through authentication, and Kerberos authentication.
Providing credentials with nodetool
Using nodetool with JMX authentication enabled.
Providing credentials with JConsole
How to use JConsole with authentication.
Providing credentials with cqlsh
Create a cqlshrc file to use credentials when launching a CQL shell session.
Using dsetool with Kerberos enabled cluster
Steps to enable dsetool to use Kerberos authentication.
Using cqlsh with Kerberos or user authentication
Configuration steps to use cqlsh with DataStax Unified Authentication.
Loading data into a remote Kerberos enabled cluster
Configure sstableloader with Kerberos to load data from an sstable into a remote DataStax Enterprise cluster with Kerberos enabled.
Using DSE Graph and Gremlin console with Kerberos
Configure Kerberos authentication in the Graph remote.yaml.
Running Spark jobs with Kerberos
Spark jobs may be run against a Kerberos enabled DataStax Enterprise database.

General Inquiries: +1 (650) 389-6000 info@datastax.com

© DataStax | Privacy policy | Terms of use | Updated: 16 February 2021

Build time: 2021-02-16 14:42:16.492

DataStax, Titan, and TitanDB are registered trademarks of DataStax, Inc. and its subsidiaries in the United States and/or other countries.

Apache, Apache Cassandra, Cassandra, Apache Tomcat, Tomcat, Apache Lucene, Apache Solr, Apache Hadoop, Hadoop, Apache Spark, Spark, Apache TinkerPop, TinkerPop, Apache Kafka and Kafka are either registered trademarks or trademarks of the Apache Software Foundation or its subsidiaries in Canada, the United States and/or other countries.

Kubernetes is the registered trademark of the Linux Foundation.

security security51