question

raktim.0526_188212 avatar image
raktim.0526_188212 asked Erick Ramirez commented

Unable to create users/super-user

My cluster comprises of 2 DCs. 1st DC has 2 nodes with Graph workload and the 2nd DC has 1 node with Search workload. I have been able to setup Auth and create a superuser on DC1 and everything is working perfectly. But on the DC2 I am able to setup Auth but unable to create a superuser. When I go to Solr Admin, it requests for a username and password, when default "cassandra" username and password is provided, it lets me access it.

I am just not able to see this default cassandra user in the Search node's CQLSH. When I do,

LIST ROLES;

It says no hosts found.

How do I access the DC1's superuser from DC2 or how do I create a superuser in DC2?

Would really appreciate the help.

authentication
10 |1000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

1 Answer

Erick Ramirez avatar image
Erick Ramirez answered Erick Ramirez commented

You haven't provided enough information to properly diagnose your problem.

Things that are relevant are:

  • confirmation that both DCs are connected, e.g. all nodes show up in nodetool status output
  • replication settings for system_auth
  • DSE version

My suspicion is that either the DCs are disconnected from each other or that the system_auth keyspace isn't replicated correctly with NetworkTopologyStrategy, possibly with incorrect DC names so Cassandra cannot find replicas. Cheers!

[UPDATE] When you configured authentication, part of the instructions required that you also configured the security keyspaces system_auth and dse_security then repair both keyspaces.

2 comments Share
10 |1000
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

raktim.0526_188212 avatar image raktim.0526_188212 ·

[Post converted to comment since it's not an "answer"]

@Erick Ramirez thank you for your reply.

  1. The DCs are connected and can be verified in nodetool status.
  2. Replication strategy for system auth is simple strategy
  3. DSE 6.7

I have attached 2 images to show you the configuration.

0 Likes 0 ·
datastax1.png (374.7 KiB)
datastax2.png (562.0 KiB)
Erick Ramirez avatar image Erick Ramirez ♦♦ raktim.0526_188212 ·

I've updated my answer with instructions to configure the replication for security keyspaces.

Can you also provide the full error + full stack trace? Cheers!

0 Likes 0 ·