如何使用自制程序构建在 Cassandra 上设置超级用户帐户？

Question

我已经使用自制软件安装了 cassandra，并尝试创建一个超级用户管理员帐户。当我输入时sudo cqlsh -u cassandra -p cassandra出现此错误：

Python Cassandra driver not installed, or not on PYTHONPATH.
You might try "pip install cassandra-driver".
Python: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python
Module load path: ['/usr/local/Cellar/cassandra/2.1.2/bin', '/Library/Python/2.7/site-packages/cql-1.4.0-py2.7.egg', '/Library/Python/2.7/site-packages/thrift-0.9.2-py2.7-macosx-10.10-intel.egg', '/Library/Python/2.7/site-packages/ccm-2.0.2-py2.7.egg', '/Library/Python/2.7/site-packages/tailer-0.3-py2.7.egg', '/Library/Python/2.7/site-packages', '/Library/Python/2.7/site-packages/psutil-2.2.0-py2.7-macosx-10.10-intel.egg', '/Library/Python/2.7/site-packages/pip-6.0.6-py2.7.egg', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python27.zip', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/plat-darwin', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/plat-mac', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/plat-mac/lib-scriptpackages', '/System/Library/Frameworks/Python.framework/Versions/2.7/Extras/lib/python', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/lib-tk', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/lib-old', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/lib-dynload', '/System/Library/Frameworks/Python.framework/Versions/2.7/Extras/lib/python/PyObjC', '/Library/Python/2.7/site-packages']

Error: No module named cassandra

当我在没有 sudo 的情况下执行此操作时，我可以使用默认登录名进入 cqlsh 。问题是，当我输入 时CREATE USER admn WITH PASSWORD 'pw' SUPERUSER;，会返回以下内容：

code=2100 [Unauthorized] message="Only superusers are allowed to perform CREATE USER queries"

当我看到这个时，我想，没问题，进入我的 cassandra.yaml 文件，位于/usr/local/etc/cassandra并更改authenticator: AllowAllAuthenticator 为authenticator: PasswordAuthenticator. 我保存了文件并返回到 cqlsh 并再次尝试。相同的结果。有人可以告诉我如何设置新用户吗？

Answer 1

你走在正确的轨道上。默认超级用户帐户是用户名“cassandra”密码“cassandra”，并且您正在适当配置身份验证器。

缺少的是，更改 cassandra.yaml 文件后，您需要重新启动 cassandra 才能使身份验证器更改生效。请注意，您还应该将授权者更改为“CassandraAuthorizer”。

如果您有一个多节点集群，则应该在所有节点上进行此更改，并且还应该增加 system_auth 键空间上的复制因子，以便允许 auth 在拥有数据的节点出现故障后继续工作。