Using dsetool with Kerberos enabled cluster
Steps to enable dsetool to use Kerberos authentication.
Use one of these options:
- Using the ~/.dserc file
- Create or edit the ~/.dserc file in your DataStax
Enterprise home directory and add the following
entries:
sasl_protocol=service_name login_config=path_to_login_config
- Command line options
- Specify the service name and JAAS configuration file on the command
line:
where:-Ddse.sasl.protocol=user@realm -Djava.security.auth.login.config=file_name
- service_name is the service name component of the service_principal that is defined in the dse.yaml file
- path_to_login_config is the JAAS configuration
file with the following options declared in
it:
DseClient { com.sun.security.auth.module.Krb5LoginModule required useTicketCache=true renewTGT=true; };