You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
For 3.11 and 4, configure credential caching parameters in `cassandra.yaml` if necessary and if you want
137
137
that cache to be enabled (as per configuration parameters). [Re]start Cassandra.
138
138
139
-
140
139
## Example
141
140
142
141
For fast testing there is Debian OpenLDAP Docker container
@@ -185,6 +184,21 @@ If you delete `cassandra` user, there is suddenly not such user. You have to res
185
184
186
185
Where `dba` is _new_ superuser which is able to write to `system_auth.roles` and acts as Cassandra admin.
187
186
187
+
## SPI for LDAP server implementations (advanced)
188
+
189
+
In order to talk to a LDAP server, there is `DefaultLDAPServer` class in `base` module which all modules are using.
190
+
However, it might not be enough - there is a lot of LDAP servers out there and their internals and configuration
191
+
might render the default implementation incompatible. If you have special requirements, you might provide your
192
+
own implementation by extending `DefaultLDAPServer` and overriding what is necessary. You might as well
193
+
extend and implement `LDAPPasswordRetriever` class. `DefaultLDAPServer` just extends it.
194
+
195
+
To tell LDAP plugin to use your implementation, you need to create a file in `src/main/resources/META-INF/services`
196
+
called `com.instaclustr.cassandra.ldap.auth.LDAPPasswordRetriever` and the content of that file needs to
197
+
be just one line - the fully qualified class name (with package) of your custom implementation.
198
+
199
+
After you build such plugin, the SPI mechanism upon plugin's initialisation during Cassandra node startup
200
+
will pick up your custom LDAP server connection / authentication logic.
201
+
188
202
## Further Information
189
-
- See blog by Kurt Greaves ["Apache Cassandra LDAP Authentication"](https://www.instaclustr.com/apache-cassandra-ldap-authentication/)
203
+
- See blog by Kurt Greaves https://www.instaclustr.com/apache-cassandra-ldap-authentication/[Apache Cassandra LDAP Authentication]
190
204
- Please see https://www.instaclustr.com/support/documentation/announcements/instaclustr-open-source-project-status/ for Instaclustr support status of this project
0 commit comments