Unable to create users/super-user

Question

question

raktim.0526_188212 asked · Sep 22 at 05:31 AM

Unable to create users/super-user

My cluster comprises of 2 DCs. 1st DC has 2 nodes with Graph workload and the 2nd DC has 1 node with Search workload. I have been able to setup Auth and create a superuser on DC1 and everything is working perfectly. But on the DC2 I am able to setup Auth but unable to create a superuser. When I go to Solr Admin, it requests for a username and password, when default "cassandra" username and password is provided, it lets me access it.

I am just not able to see this default cassandra user in the Search node's CQLSH. When I do,

LIST ROLES;

It says no hosts found.

How do I access the DC1's superuser from DC2 or how do I create a superuser in DC2?

Would really appreciate the help.

authentication

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Answer 1 · 2020-09-22T06:42:14Z

Erick Ramirez answered · Sep 22 at 06:42 AM

You haven't provided enough information to properly diagnose your problem.

Things that are relevant are:

confirmation that both DCs are connected, e.g. all nodes show up in nodetool status output
replication settings for system_auth
DSE version

My suspicion is that either the DCs are disconnected from each other or that the system_auth keyspace isn't replicated correctly with NetworkTopologyStrategy, possibly with incorrect DC names so Cassandra cannot find replicas. Cheers!

[UPDATE] When you configured authentication, part of the instructions required that you also configured the security keyspaces system_auth and dse_security then repair both keyspaces.

2 Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

raktim.0526_188212 · Sep 22 at 06:57 AM

[Post converted to comment since it's not an "answer"]

@Erick Ramirez thank you for your reply.

The DCs are connected and can be verified in nodetool status.
Replication strategy for system auth is simple strategy
DSE 6.7

I have attached 2 images to show you the configuration.

0 · ·

datastax1.png (374.7 KiB)

datastax2.png (562.0 KiB)

Erick Ramirez ♦♦ raktim.0526_188212 · Sep 22 at 07:31 AM

I've updated my answer with instructions to configure the replication for security keyspaces.

Can you also provide the full error + full stack trace? Cheers!

0 · ·

question