简体   繁体   English

DSE 验证 Spark AlwaysOn SQL

[英]DSE Authenticate Spark AlwaysOn SQL

I've installed DSE (Cassandra + Search + Graph + Analytics) on a single for dev purposes and I'm not able to connect to the AlwaysOn SQL, it's enabled on dse.yaml file but I'm not sure how to set access / permissions.我已将 DSE(Cassandra + Search + Graph + Analytics)安装在一个用于开发目的的设备上,但我无法连接到 AlwaysOn SQL,它已在 dse.yaml 文件上启用,但我不确定如何设置访问权限/ 权限。

Configurations:配置:

cassandra.yaml: authenticator=AllowAllAuthenticator cassandra.yaml:验证器=AllowAllAuthenticator

dse.yaml: authentication_options=enabled dse.yaml: authentication_options=启用

hive-site.xml: jdbc-auth-type=password hive-site.xml:jdbc-auth-type=密码

I'm not able to give access to the user "alwayson_sql" from CQLSH (cqlsh -u cassandra -p cassandra): Unauthorized: Error from server: code=2100 [Unauthorized] message="Anonymous users are not authorized to perform this request"我无法从 CQLSH 授予用户“alwayson_sql”的访问权限(cqlsh -u cassandra -p cassandra):未经授权:来自服务器的错误:code=2100 [Unauthorized] message="匿名用户无权执行此请求"

Based on this guide: https://docs.datastax.com/en/security/6.0/security/secAuthSpark.html?hl=alwayson基于本指南: https://docs.datastax.com/en/security/6.0/security/secAuthSpark.html?hl=alwayson

What will be the right configuration / process to allow access to the AlwaysOn SQL?允许访问 AlwaysOn SQL 的正确配置/流程是什么? (for now security is not important it's a dev environment for testings only) (现在安全性并不重要,它是一个仅用于测试的开发环境)

You shouldn't change authenticator to AllowAllAuthenticator - in DSE, you must use com.datastax.bdp.cassandra.auth.DseAuthenticator (the same is for authorizer) & configure it via dse.yaml as described in the documentation - configure internal authentication schema, and enable authorization options as well. You shouldn't change authenticator to AllowAllAuthenticator - in DSE, you must use com.datastax.bdp.cassandra.auth.DseAuthenticator (the same is for authorizer) & configure it via dse.yaml as described in the documentation - configure internal authentication schema ,并启用授权选项。

And because you're using AllowAllAuthenticator , then your user is not authenticated, even if you pass username/password, and this lead to the error that you receive.而且因为您使用的是AllowAllAuthenticator ,所以即使您传递了用户名/密码,您的用户也不会经过身份验证,这会导致您收到错误。

After you configure authentication/authorization, you can continue login & configure AOSS access rights as described in documentation .配置身份验证/授权后,您可以按照文档中的说明继续登录并配置 AOSS 访问权限。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM