Hi Steve, From the janusgraph documentation, I see that there is storage.username and storage.password. You should be able to update the files to add those properties and it should work.
Thanks, Harish -----Original Message----- From: [email protected] <[email protected]> On Behalf Of BLIMKIE, STEVEN Sent: Friday, November 30, 2018 9:21 AM To: KAJUR, HARISH V <[email protected]>; [email protected]; [email protected]; FORSYTH, JAMES <[email protected]> Subject: Re: [onap-discuss] [aai] Support for 2-way SSL? Thanks Harish ... sounds like 2-way SSL is limitation of Janus and not traversal/resources. One other quick question: In the absence of 2-way SSL, do resources/traversal support user/pwd authentication with Cassandra? Cheers, Steve -----Original Message----- From: KAJUR, HARISH V <[email protected]> Sent: Thursday, November 29, 2018 9:27 PM To: [email protected]; [email protected]; Steven Blimkie <[email protected]>; FORSYTH, JAMES <[email protected]> Subject: RE: [onap-discuss] [aai] Support for 2-way SSL? Hi, If they want to connect to an existing Cassandra cluster, then they can do so by creating an new override yaml file and no changes to oom repo. By creating or updating the overrides file as below with their cluster values: global: config: cluster: cassandra: dynamic: false # If cluster.cassandra.dynamic is set to false # Then the following configuration should be uncommented # This is if you are planning to connect to a existing # Cassandra cluster instead of doing the deployment storage: backend: cassandra hostname: somehost1,somehost2,somehost3 connectionTimeout: 100000 cacheSize: 1000000 clusterName: someClusterName localDataCenter: someDataCenter keyConsistent: true # If backend is cql or cassandra it should be keyspace name # else backend is hbase it should be hbase table name name: your_hbase_table_or_keyspace_name # Cassandra driver specific properties for janusgraph cassandra: # Name of the Cassandra Cluster cluster: someclustername readConsistency: LOCAL_QUORUM writeConsistency: LOCAL_QUORUM replicationFactor: 3 I don't think the communication between the janusgraph and Cassandra will be two way ssl as its only asking for truststore in the ssl section of janusgraph documentation. It can definitely support one way ssl from the configuration. If they want to use one way ssl, then they would need to update some files in the oom repo. They would need to update the following properties files: oom/kubernetes/aai/charts/aai-resources/resources/config/janusgraph-realtime.properties oom/kubernetes/aai/charts/aai-resources/resources/config/janusgraph-cached.properties oom/kubernetes/aai/charts/aai-traversal/resources/config/janusgraph-realtime.properties oom/kubernetes/aai/charts/aai-traversal/resources/config/janusgraph-cached.properties oom/kubernetes/aai/charts/aai-graphadmin/resources/config/janusgraph-realtime.properties oom/kubernetes/aai/charts/aai-graphadmin/resources/config/janusgraph-cached.properties From the documentation link Keong provided, if they add the required properties in the above files, then one way ssl communication can work. Thanks, Harish -----Original Message----- From: [email protected] <[email protected]> On Behalf Of Keong Lim Sent: Thursday, November 29, 2018 7:48 PM To: BLIMKIE, STEVEN <[email protected]>; [email protected] Subject: Re: [onap-discuss] [aai] Support for 2-way SSL? Hi Steve, The part you are actually talking about is the JanusGraph-to-Cassandra communications, since Cassandra is the backend storage engine. According to: - https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.janusgraph.org_0.2.0_cassandra.html&d=DwIFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=f44eG3iZaja2ozEA2yRZnQ&m=DR-D3pKngmkLiJf5ldOYEoVD4xaVRJ0Z4mKsNfp4Xeg&s=BoZJPy-I78wwUM8Ka9EH0CIJqh9kGH5bNRiT7KGKLVY&e= - https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.janusgraph.org_0.2.0_config-2Dref.html&d=DwIFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=f44eG3iZaja2ozEA2yRZnQ&m=DR-D3pKngmkLiJf5ldOYEoVD4xaVRJ0Z4mKsNfp4Xeg&s=VwXJys0STzZ69gESqvu74SwFQ4pDOxBbc2G46us4p00&e= the configuration option to check for is: 13.3.27. storage.cassandra.ssl storage.cassandra.ssl.enabled Controls use of the SSL connection to Cassandra (default "false"). I did a quick search on AAI code, but could not find it. Maybe it is specified elsewhere, e.g. in OOM parameter files. Keong This email and the information contained herein is proprietary and confidential and subject to the Amdocs Email Terms of Service, which you may review at https://urldefense.proofpoint.com/v2/url?u=https-3A__www.amdocs.com_about_email-2Dterms-2Dof-2Dservice&d=DwIGaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=f44eG3iZaja2ozEA2yRZnQ&m=rhznfuLCsXqoa46jx3mmFKZ9sBSX0vxDt6SX-I87ih8&s=-HZYIPsUNDpGc-wHpYNCUK7U4y0hbPIcXmhDY7xVQDw&e= <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.amdocs.com_about_email-2Dterms-2Dof-2Dservice&d=DwIGaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=f44eG3iZaja2ozEA2yRZnQ&m=rhznfuLCsXqoa46jx3mmFKZ9sBSX0vxDt6SX-I87ih8&s=-HZYIPsUNDpGc-wHpYNCUK7U4y0hbPIcXmhDY7xVQDw&e=> -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#14175): https://lists.onap.org/g/onap-discuss/message/14175 Mute This Topic: https://lists.onap.org/mt/28503357/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
