Repository: cassandra Updated Branches: refs/heads/trunk 97ada5bdf -> 4f02db5c4
Update documentation on cassandra integrated auth to show required permissions for nodetool role Patch by Valerie Parham-Thompson; Reviewed by Per Otterström for CASSANDRA-14481 Project: http://git-wip-us.apache.org/repos/asf/cassandra/repo Commit: http://git-wip-us.apache.org/repos/asf/cassandra/commit/4f02db5c Tree: http://git-wip-us.apache.org/repos/asf/cassandra/tree/4f02db5c Diff: http://git-wip-us.apache.org/repos/asf/cassandra/diff/4f02db5c Branch: refs/heads/trunk Commit: 4f02db5c45ece38dda48e0d19667888e9f46536e Parents: 97ada5b Author: Valerie Parham-Thompson <[email protected]> Authored: Wed Jun 20 14:45:35 2018 -0400 Committer: Jeff Jirsa <[email protected]> Committed: Wed Jun 20 20:07:12 2018 -0700 ---------------------------------------------------------------------- doc/source/operating/security.rst | 4 ++++ 1 file changed, 4 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cassandra/blob/4f02db5c/doc/source/operating/security.rst ---------------------------------------------------------------------- diff --git a/doc/source/operating/security.rst b/doc/source/operating/security.rst index 1859dbc..e229c7f 100644 --- a/doc/source/operating/security.rst +++ b/doc/source/operating/security.rst @@ -379,6 +379,10 @@ jconsole or jmc in read-only mode would be defined as: GRANT EXECUTE ON MBEAN 'java.lang:type=Threading' TO jmx; GRANT EXECUTE ON MBEAN 'com.sun.management:type=HotSpotDiagnostic' TO jmx; + # Grant the role with necessary permissions to use nodetool commands (including nodetool status) in read-only mode + GRANT EXECUTE ON MBEAN 'org.apache.cassandra.db:type=EndpointSnitchInfo' TO jmx; + GRANT EXECUTE ON MBEAN 'org.apache.cassandra.db:type=StorageService' TO jmx; + # Grant the jmx role to one with login permissions so that it can access the JMX tooling CREATE ROLE ks_user WITH PASSWORD = 'password' AND LOGIN = true AND SUPERUSER = false; GRANT jmx TO ks_user; --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
