Possible authentication issue with Cassandra 1.2

David van Geest

unread,

Apr 10, 2014, 2:12:24 PM4/10/14

to spring-dat...@googlegroups.com

At David's request, I'm starting a new thread to discuss authentication in Cassandra 1.2.

I enabled authentication by setting "authenticator: PasswordAuthenticator" in /etc/cassandra/cassandra.yaml. It does say "Please increase system_auth keyspace replication factor if you use this authenticator"... however I'm not sure where to change that, so I did not do anything there.

I then logged into Cassandra via cqlsh with the "cassandra" superuser and created an "al2_dev" user with password "password" (this is just a dev box). I am able to login with this user using cqlsh:

davidv@calydon ~ $ cqlsh -u al2_dev -p password

Connected to AL2 at localhost:9160.

[cqlsh 3.1.7 | Cassandra 1.2.10 | CQL spec 3.0.0 | Thrift protocol 19.36.0]

Use HELP for help.

cqlsh> exit

However, when using spring-cql 1.0.0.M1, I get an exception when Spring tries to create the cassandraCluster bean:

Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'cassandraCluster': Invocation of init method failed; nested exception is com.datastax.driver.core.exceptions.AuthenticationException: Authentication error on host localhost/127.0.0.1: java.lang.ArrayIndexOutOfBoundsException: 15

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1512)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:521)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:458)

at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:296)

at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:223)

at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:293)

at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:194)

at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:320)

... 75 more

Caused by: com.datastax.driver.core.exceptions.AuthenticationException: Authentication error on host localhost/127.0.0.1: java.lang.ArrayIndexOutOfBoundsException: 15

at com.datastax.driver.core.Connection.waitForSaslCompletion(Connection.java:203)

at com.datastax.driver.core.Connection.initializeTransport(Connection.java:169)

at com.datastax.driver.core.Connection.<init>(Connection.java:131)

at com.datastax.driver.core.Connection.<init>(Connection.java:59)

at com.datastax.driver.core.Connection$Factory.open(Connection.java:444)

at com.datastax.driver.core.ControlConnection.tryConnect(ControlConnection.java:205)

at com.datastax.driver.core.ControlConnection.reconnectInternal(ControlConnection.java:168)

at com.datastax.driver.core.ControlConnection.connect(ControlConnection.java:81)

at com.datastax.driver.core.Cluster$Manager.init(Cluster.java:812)

at com.datastax.driver.core.Cluster$Manager.access$100(Cluster.java:739)

at com.datastax.driver.core.Cluster.<init>(Cluster.java:82)

at com.datastax.driver.core.Cluster.<init>(Cluster.java:67)

at com.datastax.driver.core.Cluster$Builder.build(Cluster.java:708)

at org.springframework.cassandra.config.CassandraCqlClusterFactoryBean.afterPropertiesSet(CassandraCqlClusterFactoryBean.java:186)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$6.run(AbstractAutowireCapableBeanFactory.java:1561)

at java.security.AccessController.doPrivileged(Native Method)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1559)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1509)

......

The relevant part of my XML config is:

<cql:cluster

contact-points="${cassandra.contact_points}"

port="${cassandra.port}"

ssl-enabled="${cassandra.ssl_enabled}"

auth-info-provider-ref="cassandraAuthProvider"

username="${cassandra.username}"

password="${cassandra.password}" />

<cql:session keyspace-name="${cassandra.keyspace_name}" />

<cql:template />

If I turn off authentication by going back to the "AllowAllAuthenticator" and restarting Cassandra, things work as expected.

Versions:

davidv@calydon ~ $ cassandra -v

xss = -ea -javaagent:/usr/share/cassandra/lib/jamm-0.2.5.jar -XX:+UseThreadPriorities -XX:ThreadPriorityPolicy=42 -Xms2949M -Xmx2949M -Xmn737M -XX:+HeapDumpOnOutOfMemoryError -Xss256k

1.2.10

(this is the DataStax distro)

davidv@calydon ~ $ java -version

java version "1.7.0_51"

Java(TM) SE Runtime Environment (build 1.7.0_51-b13)

Java HotSpot(TM) 64-Bit Server VM (build 24.51-b03, mixed mode)

spring-context: 3.2.8.RELEASE

(the rest of these should be unrelated I would think...)

spring-orm: 3.2.8.RELEASE

spring-security-crypto: 3.2.3.RELEASE

spring-data-couchbase: 1.0.0.RELEASE

spring-rabbit: 1.3.1.RELEASE

One note, I'm excluding spring-data-commons from the spring-cql dependencies because it conflicts with the spring-data-commons required by spring-data-couchbase. To ensure this wasn't causing the problem, I temporarily allowed spring-cql's spring-data-commons, but got the same result.

I am by no means a Cassandra or Spring expert, so it's quite possible I'm doing something incorrectly. Any ideas? Thanks!

David van Geest

unread,

Apr 10, 2014, 2:25:51 PM4/10/14

to spring-dat...@googlegroups.com

I should also perhaps add that authorization is not a factor here. I have "authorizer: AllowAllAuthorizer" set, and can access the keyspace in question:

davidv@calydon ~ $ cqlsh -u al2_dev -p password

Connected to AL2 at localhost:9160.

[cqlsh 3.1.7 | Cassandra 1.2.10 | CQL spec 3.0.0 | Thrift protocol 19.36.0]

Use HELP for help.

cqlsh> use al2_dev;

cqlsh:al2_dev> select * from readings;

instrument_id | date_time | value

---------------+--------------------------+-------

5 | 2014-04-09 20:20:38-0400 | 12.5

5 | 2014-04-09 21:20:38-0400 | 12.4

5 | 2014-04-09 22:20:38-0400 | 12.3

1 | 2014-04-09 22:20:38-0400 | 12.4

2 | 2014-04-09 22:20:38-0400 | 12.9

6 | 2014-04-09 20:20:38-0400 | 12.5

6 | 2014-04-09 21:20:38-0400 | 12.4

6 | 2014-04-09 22:20:38-0400 | 12.3

--
You received this message because you are subscribed to the Google Groups "Spring Data Cassandra" group.
To unsubscribe from this group and stop receiving emails from it, send an email to spring-data-cass...@googlegroups.com.
To post to this group, send email to spring-dat...@googlegroups.com.
Visit this group at http://groups.google.com/group/spring-data-cassandra.
To view this discussion on the web visit https://groups.google.com/d/msgid/spring-data-cassandra/fa2cd320-173a-471f-ab0d-4f3cabcb078d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

David van Geest
Software Engineer
SpinDance, Inc.
616.355.7000 x113

David Webb

unread,

Apr 10, 2014, 3:07:48 PM4/10/14

to spring-dat...@googlegroups.com

Change the Authorizer as follows:

authorizer: org.apache.cassandra.auth.CassandraAuthorizer

Are you using DSE or C* OSS?

If you are not using DSE, try either omitting the auth-info-provider-ref, or using this class as the auth provider

com.datastax.driver.core.PlainTextAuthProvider

The DseAuthProvider is for DSE only.

HTH

David van Geest

unread,

Apr 10, 2014, 3:43:49 PM4/10/14

to David Webb, spring-data-cassandra

Thanks for the reply David!

I'm using DataStax Community Edition from http://debian.datastax.com/community. I assume this is the same as C* OSS.

I tried the following 4 things, both with AllowAllAuthorizer and org.apache.cassandra.auth.CassandraAuthorizer:

1. Removed the auth-info-provider-ref and removed the cassandraAuthProvider bean (also tried leaving in the cassandraAuthProvider bean, and also renaming it to authProvider)

All of the above give the following:

Caused by: com.datastax.driver.core.exceptions.AuthenticationException: Authentication error on host localhost/127.0.0.1: Host localhost/127.0.0.1 requires authentication, but no authenticator found in Cluster configuration

at com.datastax.driver.core.AuthProvider$1.newAuthenticator(AuthProvider.java:39)

at com.datastax.driver.core.Connection.initializeTransport(Connection.java:163)