cassandra-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Sam Tunnicliffe <...@beobal.com>
Subject Re: cassandra non-super user login fails but super user works
Date Tue, 24 Oct 2017 11:55:01 GMT
Which version of Cassandra are you running?

My guess is that you're on a version >= 2.2 and that you've created the
non-superuser since upgrading, but haven't yet removed the legacy tables
from the system_auth keyspace. If that's the case, then the new user will
be present in the new tables, but authentication at login time is still
using the old ones.

The schema of the system_auth keyspace was changed in 2.2 with the
introduction of role based access control and requires a little operator
involvement to switch over to using the new tables, see the section on
upgrading to 2.2 in NEWS.txt for the full details.

Thanks,
Sam


On 23 October 2017 at 16:08, Meg Mara <mmara@digitalriver.com> wrote:

> You should probably verify if the ‘can_login’ field of the non-superuser
> role is set to true. You can query the column family system_auth.roles to
> find out.
>
>
>
> Thanks,
>
> Meg Mara
>
>
>
> *From:* Justin Cameron [mailto:justin@instaclustr.com]
> *Sent:* Sunday, October 22, 2017 6:21 PM
> *To:* user@cassandra.apache.org
> *Subject:* Re: cassandra non-super user login fails but super user works
>
>
>
> Try setting the replication factor of the system_auth keyspace to the
> number of nodes in your cluster.
>
> ALTER KEYSPACE system_auth WITH replication = {'class':
> 'NetworkTopologyStrategy', '<my_datacentre>': '<number_of_nodes>'};
>
>
>
> On Sun, 22 Oct 2017 at 20:06 Who Dadddy <qwerty15676@gmail.com> wrote:
>
> Anyone seen this before? Pretty basic setup, super user can login fine but
> non-super user can’t?
>
> Any pointers appreciated.
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@cassandra.apache.org
> For additional commands, e-mail: user-help@cassandra.apache.org
>
> --
>
> *Justin Cameron*
> Senior Software Engineer
>
>
>
> <https://www.instaclustr.com/>
>
>
> This email has been sent on behalf of Instaclustr Pty. Limited (Australia)
> and Instaclustr Inc (USA).
>
> This email and any attachments may contain confidential and legally
> privileged information.  If you are not the intended recipient, do not copy
> or disclose its content, but please reply to this email immediately and
> highlight the error to the sender and then immediately delete the message.
>

Mime
View raw message