Hi,
we are using DSE 6.7,
I had enabled jmx native authentication using https://docs.datastax.com/en/security/6.7/security/secJmxAuth.html#secJmxAuth.
However, after restarting I am able to run nodetool -u -pwd status command.
But I am able to run nodetool status command without username and password which
I am not expected.
Basically I am trying to avoid JMX vulnerability .
Can you please help me?
The symptoms you described indicate that either (a) you did not configure it correctly or (b) you have not enabled it by restarting DSE.
I suggest you go over the procedure again and make sure that you followed every single step correctly. If you missed any of the steps, none of it would work. In addition, I recommend you practice configuring it on a non-production environment multiple times before attempting to implement it in a production cluster.
If you still require assistance, please log a DataStax Support ticket so one of our engineers can assist you directly. Cheers!
5 People are following this question.
