cassandracassandra-3.0cassandra-2.1

Can we use the Common Name in TLS certificates for authorization in Cassandra


I have defined roles and permission in the Cassandra tables as defined in the documentation. I am using client side authentication to provide access to the Cassandra DB. However, I want to use the CN (common name) from the client side TLS certificate to map it to a user/role and provide authorization. Is there any configuration in Cassandra that will authorize based on the CN? There are multiple clients and I want to ensure that only clients with proper authorization can access the DB. I do not want the application code to pass the username but use the CN instead.


Solution

  • No, it's not possible in the existing versions of the Apache Cassandra.