thelastpickle / cassandra-reaper

Automated Repair Awesomeness for Apache Cassandra
http://cassandra-reaper.io/
Apache License 2.0
489 stars 217 forks source link

Does Cassandra-Reaper Web UI Support Active Directory Services Authentication? #443

Open kptnew3 opened 6 years ago

kptnew3 commented 6 years ago

Project board link

Spotted on 1.2.0-BETA-20180607 (21edbeb) Hello Reaper Team,

Can you please let me know if Cassandra-Reaper Web UI Support Active Directory Services Authentication? I am able to use the file authentication on Beta version however not able to find documentation for ADS authentication. Your help would be greatly appreciated.

Thanks, Gagan

┆Issue is synchronized with this Jira Story by Unito ┆Issue Number: REAP-170

AndrewB2018 commented 5 years ago

+1

adejanovski commented 2 years ago

If it's compatible with LDAP, yes, otherwise no.

sb116 commented 1 year ago

@adejanovski can you please share ldap settings for cassandra-reaper? I have setup ldap, but I am not able to get it work

adejanovski commented 1 year ago

You can find an example of setting up ldap in shiro here.

sb116 commented 1 year ago

hi @adejanovski I followed the steps mentioned in that link -- but I get an exception:

DEBUG  [dw-50 - POST /login] o.a.s.r.l.JndiLdapContextFactory - Initializing LDAP context using URL [ldaps://ldap-address:636] and principal [username] with pooling disabled
DEBUG  [Thread-19] j.e.security - X509Certificate: Alg:SHA256withRSA, <snip
....
TRACE  [dw-50 - POST /login] o.a.s.w.s.SimpleCookie - calculated path: /
DEBUG  [dw-50 - POST /login] o.a.s.w.s.SimpleCookie - Added HttpServletResponse Cookie [rememberMe=deleteMe; Path=/; Max-Age=0; Expires=Thu, 18-May-2023 20:57:07 GMT; SameSite=lax]
TRACE  [dw-50 - POST /login] o.a.s.w.s.SimpleCookie - Removed 'rememberMe' cookie by setting maxAge=0
DEBUG  [dw-50 - POST /login] o.g.j.s.ServerRuntime$Responder - Starting mapping of the exception.
org.glassfish.jersey.server.internal.process.MappableException: org.apache.shiro.authc.IncorrectCredentialsException: Invalid credentials combination for user: username
        at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.mapTargetToRuntimeEx(AbstractJavaResourceMethodDispatcher.java:185)

Caused by: org.apache.shiro.authc.IncorrectCredentialsException: Invalid credentials combination for user: username
        at io.cassandrareaper.resources.auth.LoginResource.login(LoginResource.java:50)
..
INFO   [dw-50 - POST /login] i.c.r.a.ShiroExceptionMapper - Authentication failed
org.apache.shiro.authc.IncorrectCredentialsException: Invalid credentials combination for user: username

i can access ldap server/service account via ldapsearch utility