search

instaclustr / cassandra-ldap

LDAP Authenticator for Apache Cassandra
Apache License 2.0
24 stars 16 forks source link

Rights #19

Open ddurieux opened 2 years ago

ddurieux commented 2 years ago

What version of Cassandra are you using?

3.11.10

What version of Cassandra LDAP are you using?

v3.11.11-1.0.0

What LDAP server you are using? Any specifics?

Active Directory

What did you do?

What did you expect to see?

What did you see instead?

It's written normal Cassandra role with all its permissions and so on when connecting.

Is it possible to change this default behavior, for example by have default access to anything?

smiklosovic commented 2 years ago

hey, it seems to me it is written few lines above:

-Dcassandra.ldap.admin.user=dba

Has not that helped?

ddurieux commented 2 years ago

As I undertand, it's the rights used by the plugin to create the role when user connect and not in the roles, so seems not the definition of the rights put to the user. Perhaps I misunderstand :p

dave-pollock commented 1 year ago

@ddurieux A PR has now been merged which adds the ability to set a default role which new LDAP users will be added to. https://github.com/instaclustr/cassandra-ldap/pull/34

Once @smiklosovic publishes v1.1.0, this should help.