{"id":31541,"date":"2016-01-16T19:18:13","date_gmt":"2016-01-16T13:48:13","guid":{"rendered":"http:\/\/www.tothenew.com\/blog\/?p=31541"},"modified":"2016-01-19T13:23:46","modified_gmt":"2016-01-19T07:53:46","slug":"cassandra-authentication-and-create-user","status":"publish","type":"post","link":"https:\/\/www.tothenew.com\/blog\/cassandra-authentication-and-create-user\/","title":{"rendered":"Cassandra Authentication and Create User"},"content":{"rendered":"

Introduction<\/span> :<\/em><\/h3>\n

The Apache Cassandra<\/a> database is the right choice when you need scalability and high availability without compromising performance.\u00a0Not having to distinguish between a Master and a Slave node allows you to add any number of machines to any cluster in any datacenter, without having to worry about what type of machine you need at the moment. Every server accepts requests from any client. There are no single points of failure. There are no network bottlenecks. Every node in the cluster is identical.<\/p>\n

By default when we install cassandra on a machine it do not has any username and password authentication. We can directly use cassandra console by just a simple\u00a0command cqlsh<\/strong>. Therefore this blog post is regarding to enable the authentication in cassandra and to create a user with different access permissions to databases.<\/p>\n

Basic Key Points<\/span> :<\/em><\/h3>\n
    \n
  1. cassandra.yaml<\/strong><\/span> file location:\n
      \n
    • Cassandra Packaged installs:<\/strong> \/etc\/cassandra\/conf<\/span><\/li>\n
    • Cassandra Binary installs (tarball):<\/strong> <install_location>\/conf<\/span><\/li>\n
    • DataStax Enterprise Packaged installs:<\/strong> \/etc\/dse\/cassandra<\/span><\/li>\n
    • DataStax Enterprise Binary installs (tarball):<\/strong> <install_location>\/resources\/cassandra\/conf<\/span><\/li>\n<\/ul>\n<\/li>\n
    • OpsCenter :\u00a0<\/span><\/strong>A tool to create and manage cassandra clusters.<\/span><\/span><\/li>\n<\/ol>\n

      Steps to Enable Authentication<\/strong><\/em><\/span>\u00a0:<\/h3>\n
        \n
      1. Edit the cassandra.yaml <\/strong>file in all the servers in cassandra cluster and change the following properties\n
          \n
        • authorizer : CassandraAuthorizer<\/span><\/strong><\/li>\n
        • authenticator : PasswordAuthenticator<\/span><\/strong><\/li>\n<\/ul>\n<\/li>\n
        • Now Restart the cassandra servers as\n
            \n
          • If\u00a0Cassandra Packaged installs (installed as a service) then run the\u00a0command \u00a0: \u00a0sudo service cassandra restart<\/span><\/strong><\/li>\n
          • If Cassandra binary Installs (installed manually) then run following commands\n
              \n
            • ps -eaf | grep cassandra \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0(note the pid of cassandra)<\/strong><\/li>\n
            • kill -9 <pid><\/strong><\/li>\n
            • <install location>\/bin\/cassandra<\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n
            • If you are having OpsCenter installed in machine the you can change the above config properties form Opscenter UI.\n
                \n
              • Go to OpsCenter UI in browser as <serverIp>\/8888<\/strong><\/li>\n
              • On the upper right corner click on Cluster Actions\u00a0<\/strong>dropdown and then click configure<\/strong>\"\"<\/li>\n
              • Now Configure the above properties from UI as
                \n\"\" <\/li>\n
              • Change the properties and click the Save Configuration\u00a0<\/b>at the end of configuration popup.<\/li>\n
              • Now restart the cluster from the same right upper corner dropdown menu by clicking\u00a0restart.<\/strong><\/strong> <\/li>\n<\/ul>\n<\/li>\n
              • Ahoy You are done.<\/li>\n
              • Now time to access cassandra console by using default username and password.<\/li>\n
              • Run the command :\u00a0cqlsh <localhost or server Ip> -u cassandra -p cassandra<\/strong><\/li>\n
              • Now You can create user as\n
                  \n
                • CREATE USER ‘user_name’ WITH PASSWORD ‘<password>’;<\/strong><\/li>\n
                • CREATE USER ‘user_name’ WITH PASSWORD ‘<password>’ SUPERUSER; \u00a0 \u00a0<to create super user><\/span><\/strong><\/li>\n
                • Now you can give the access of individual Keyspaces to specific users as\n
                    \n
                  • GRANT SELECT ON KEYSPACE <keyspace_name> TO ‘<user_name>’;<\/span><\/strong> \u00a0 \u00a0 \u00a0<gives only read only access to user><\/strong><\/span><\/li>\n
                  • GRANT ALL\u00a0ON KEYSPACE <keyspace_name> TO ‘<user_name>’; \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0<gives all\u00a0access to user><\/strong><\/span><\/span><\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n

                    Conclusion<\/strong><\/span> :<\/strong><\/h3>\n

                    So this is the way to enable the authentication is cassandra and to create users with different permissions. Hope you all will like the post. I will be back soon with some new topic, till then\u00a0stay happy and keep exploring \u00a0 \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"

                    Introduction : The Apache Cassandra database is the right choice when you need scalability and high availability without compromising performance.\u00a0Not having to distinguish between a Master and a Slave node allows you to add any number of machines to any cluster in any datacenter, without having to worry about what type of machine you need […]<\/p>\n","protected":false},"author":591,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":91},"categories":[1395],"tags":[501,2982,2983],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts\/31541"}],"collection":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/users\/591"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/comments?post=31541"}],"version-history":[{"count":0,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts\/31541\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/media?parent=31541"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/categories?post=31541"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/tags?post=31541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}