1

I've installed DSE (Cassandra + Search + Graph + Analytics) on a single for dev purposes and I'm not able to connect to the AlwaysOn SQL, it's enabled on dse.yaml file but I'm not sure how to set access / permissions.

Configurations:

cassandra.yaml: authenticator=AllowAllAuthenticator

dse.yaml: authentication_options=enabled

hive-site.xml: jdbc-auth-type=password

I'm not able to give access to the user "alwayson_sql" from CQLSH (cqlsh -u cassandra -p cassandra): Unauthorized: Error from server: code=2100 [Unauthorized] message="Anonymous users are not authorized to perform this request"

Based on this guide: https://docs.datastax.com/en/security/6.0/security/secAuthSpark.html?hl=alwayson

What will be the right configuration / process to allow access to the AlwaysOn SQL? (for now security is not important it's a dev environment for testings only)

Rafael Mor
  • 626
  • 1
  • 7
  • 21

1 Answers1

0

You shouldn't change authenticator to AllowAllAuthenticator - in DSE, you must use com.datastax.bdp.cassandra.auth.DseAuthenticator (the same is for authorizer) & configure it via dse.yaml as described in the documentation - configure internal authentication schema, and enable authorization options as well.

And because you're using AllowAllAuthenticator, then your user is not authenticated, even if you pass username/password, and this lead to the error that you receive.

After you configure authentication/authorization, you can continue login & configure AOSS access rights as described in documentation.

Alex Ott
  • 80,552
  • 8
  • 87
  • 132
  • Thanks! after updating the config on OpsCnter the job failed with msg: Verifying the password for DSE user 'cassandra' - Do you know what have I missed? – Rafael Mor Apr 19 '20 at 09:36
  • You need explicitly set password for cassandra user in the configuration profile - it's a known bug in the OpsCenter LCM... For single dev environment, I recommend either just install DSE manually - you can even not use authentication/authorization, and AOSS just works out of box. Or you can use DataStax Desktop that uses Docker to rollout dev environment: https://downloads.datastax.com/#desktop – Alex Ott Apr 19 '20 at 11:16
  • This is truly amazing! I missed this option, it's really fast deployment and beautiful UI :) + save costs on servers for developers, do you know when there will be a support for DSE 6.8? We need to use the Graph there is major improvements and functionality only on this version. Thank you! – Rafael Mor Apr 19 '20 at 20:20
  • I really don’t know - can you ask at https://community.datastax.com/ ? I would expect that it should be really soon, as it depends only on Docker images... – Alex Ott Apr 19 '20 at 20:40
  • Sure I will ask there. Do you know what is the default user and password for the AlwaysOn SQL on the docker image? Can't find it in the docs. – Rafael Mor Apr 20 '20 at 04:01
  • I don’t remember out of head, but there shouldn’t be any auth by default, so empty username password should work – Alex Ott Apr 20 '20 at 05:55
  • The issue seems to be with the HIve version, How can I find out what version is being used on DSE 6.7 / 6.8? – Rafael Mor Apr 20 '20 at 16:07