cassandra-ldap icon indicating copy to clipboard operation
cassandra-ldap copied to clipboard

Able to authenticate only to the users that are in ldap.properties (service_dn)

Open sri-postgres-cassandra opened this issue 1 year ago • 1 comments

Please answer these questions before submitting your issue. Thanks!

What version of Cassandra are you using?

Apache Cassandra version 4.1.4

What version of Cassandra LDAP are you using?

cassandra-ldap-4.1.0-1.0.0.jar

What LDAP server you are using? Any specifics?

What did you do?

I have updated the ldap.properties with the below values. I was able to authenticate only with the user admin (service_dn) but was not able to authenticate if that user was removed from ldap.properties file (service_dn) .

ldap_uri: ldaps://example.com:636/ service_dn: cn=admin,dc=example,dc=com service_password: cassandra_ldap_admin_user: default_role_membership: filter_template: cn=%s

What did you expect to see?

I should be able to authenticate with the users that are not part of service_dn in the ldap.properties .

What did you see instead?

Able to authenticate with the user in ldap.properties file

If you are having connectivity related issues please share the following additional information

Describe your Cassandra cluster

please provide the following information

  • output of nodetool status -- All the nodes are up and running
  • output of SELECT peer, rpc_address FROM system.peers -- Both nodes are in peer state
  • output of describe keyspace system_auth -- I had altered the keyspace with networktopolgy .

can someone please reply if you have faced the above issues.

Thank you !!

sri-postgres-cassandra avatar May 27 '24 20:05 sri-postgres-cassandra

I was able to finally resolve this issue by granting Read and Search privileges in ldap ( radiant login) to the servic_dn user ( admin)

sri-postgres-cassandra avatar Apr 11 '25 01:04 sri-postgres-cassandra