Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Able to authenticate only to the users that are in ldap.properties (service_dn) . #50

Open
sri-postgres-cassandra opened this issue May 27, 2024 · 0 comments

Comments

@sri-postgres-cassandra
Copy link

Please answer these questions before submitting your issue. Thanks!

What version of Cassandra are you using?

Apache Cassandra version 4.1.4

What version of Cassandra LDAP are you using?

cassandra-ldap-4.1.0-1.0.0.jar

What LDAP server you are using? Any specifics?

What did you do?

I have updated the ldap.properties with the below values. I was able to authenticate only with the user admin (service_dn) but was not able to authenticate if that user was removed from ldap.properties file (service_dn) .

ldap_uri: ldaps://example.com:636/
service_dn: cn=admin,dc=example,dc=com
service_password:
cassandra_ldap_admin_user:
default_role_membership:
filter_template: cn=%s

What did you expect to see?

I should be able to authenticate with the users that are not part of service_dn in the ldap.properties .

What did you see instead?

Able to authenticate with the user in ldap.properties file

If you are having connectivity related issues please share the following additional information

Describe your Cassandra cluster

please provide the following information

  • output of nodetool status -- All the nodes are up and running
  • output of SELECT peer, rpc_address FROM system.peers -- Both nodes are in peer state
  • output of describe keyspace system_auth -- I had altered the keyspace with networktopolgy .

can someone please reply if you have faced the above issues.

Thank you !!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant