Opscenter 4.0.2 和 Cassandra 2.0.4 从 SSL 和 Auth: 代理无法连接

我正在建立 cassandra 有缺口 SSL 和intersloval. SSL 和基本身份验证密码。 没有问题 cqlsh 或者 python 连接K. cassandra 有任何证书,因为 certificate_validation 残疾人士。

配置我的群集 opscenter:

[jmx]
username =
password =
port = 7199
[kerberos_client_principals]
[kerberos]
[agents]
thrift_ssl_truststore = /usr/share/opscenter/conf/cassandra_client_trust.jks
thrift_ssl_truststore_password = changeme
[kerberos_hostnames]
[kerberos_services]
[cassandra]
username = cassandra
ssl_ca_certs = /usr/share/opscenter/conf/cassandra_external.pem
ssl_validate = False
seed_hosts = acacia
api_port = 9160
password = changeme
我正在尝试为主机安装代理 cassandra 通过 tarball. 我已经安装了 address.yaml 在:

stomp_interface: "10.235.10.7"
use_ssl: 1
尝试启动代理人 (我不得不加入 java 更多的记忆比 40 MB默认值):

INFO [thrift-init] 2014-01-27 16:32:08,300 Connecting to Cassandra cluster: 10.235.10.104 (port 9160)
INFO [thrift-init] 2014-01-27 16:32:08,316 Downed Host Retry service started with queue size -1 and retry delay 10s
INFO [thrift-init] 2014-01-27 16:32:08,322 Registering JMX me.prettyprint.cassandra.service_Agent Cluster:ServiceType=hector,MonitorType=hector
ERROR [thrift-init] 2014-01-27 16:32:08,556 MARK HOST AS DOWN TRIGGERED for host 10.235.10.104(10.235.10.104):9160
ERROR [thrift-init] 2014-01-27 16:32:08,557 Pool state on shutdown: :{10.235.10.104(10.235.10.104):9160}; IsActive?: true; Active: 1; Blocked: 1; Idle: 0; NumBeforeExhausted: 0
INFO [thrift-init] 2014-01-27 16:32:08,557 Shutdown triggered on :{10.235.10.104(10.235.10.104):9160}
INFO [thrift-init] 2014-01-27 16:32:08,557 Shutdown complete on :{10.235.10.104(10.235.10.104):9160}
INFO [thrift-init] 2014-01-27 16:32:08,557 Host detected as down was added to retry queue: 10.235.10.104(10.235.10.104):9160
WARN [thrift-init] 2014-01-27 16:32:08,558 Could not fullfill request on this host CassandraClient
WARN [thrift-init] 2014-01-27 16:32:08,559 Exception:
me.prettyprint.hector.api.exceptions.HectorTransportException: org.apache.thrift.transport.TTransportException
at me.prettyprint.cassandra.service.ExceptionsTranslatorImpl.translate(ExceptionsTranslatorImpl.java:33)
at me.prettyprint.cassandra.service.AbstractCluster$2.execute(AbstractCluster.java:151)
at me.prettyprint.cassandra.service.AbstractCluster$2.execute(AbstractCluster.java:145)
at me.prettyprint.cassandra.service.Operation.executeAndSetResult(Operation.java:104)
at me.prettyprint.cassandra.connection.HConnectionManager.operateWithFailover(HConnectionManager.java:258)
at me.prettyprint.cassandra.service.AbstractCluster.describeClusterName(AbstractCluster.java:155)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at clojure.lang.Reflector.invokeMatchingMethod(Reflector.java:93)
at clojure.lang.Reflector.invokeNoArgInstanceMember(Reflector.java:298)
at clj_hector.core$cluster_name.invoke(core.clj:40)
at opsagent.cassandra$setup_cassandra$f__352__auto____899$fn__919.invoke(cassandra.clj:360)
at opsagent.cassandra$setup_cassandra$f__352__auto____899.invoke(cassandra.clj:358)
at clojure.lang.AFn.run(AFn.java:24)
at java.lang.Thread.run(Thread.java:724)
Caused by: org.apache.thrift.transport.TTransportException
我不知道它是否与之相关 SSL 或与用户一起 / 密码 ... 但它不起作用。 当代理连接到本地服务器时 Cassandra, 我希望他需要知道登录 / 密码用户 cassandra (或任何超级用户或或许是常规用户)? 是不是?
已邀请:

奔跑吧少年

赞同来自:

最有可能的是,这是由于比赛的着名地位,当代理正在尝试通过之前通过节省连接到本地节点时 opscenterd 可以发送信息 SSL. 旁路路径 - 手动配置参数 SSL 代理B. address.yaml:

thrift_ssl_truststore: /etc/dse/conf/.truststore 
thrift_ssl_truststore_password: XYZ

并重新启动代理。

要回复问题请先登录注册