Purpose

Specifies the three-part service principal name registered with the key distribution center (KDC) in a Kerberos configuration.

Valid Values

Service_Name/Fully_Qualified_Domain_Name@REALM_NAME

where:

Service_Name
is the name of the service hosting the instance. The default value is cassandra.
Fully_Qualified_Domain_Name

is the fully qualified domain name (FQDN) of the host machine. (The FQDN consists of a host name and a domain name. For the example myserver.test.com, myserver is the host name and test.com is the domain name.) The FQDN registered with the KDC must match the FQDN in your connection string.

REALM_NAME

is the Kerberos realm name. This part of the value must be specified in upper-case characters, for example, EXAMPLE.COM. For Windows Active Directory, the Kerberos realm name is the Windows domain name.

Notes

  • If the ServicePrincipalName property is unspecified, the driver builds a service principal name in the following manner.
    • cassandra is used as the service name.
    • The FQDN is obtained from the connection string.
    • The default realm in the krb5.conf file is used as the realm name.
  • You must specify a value for the ServicePrincipalName property if any of the following statements are valid.
    • You are using a service name other than the default service name cassandra.
    • The FQDN in your connection string is different from the FQDN registered with the KDC.
    • You are using a Kerberos realm other than the default realm specified in the krb5.conf file.
  • In a Kerberos configuration, an IP address cannot be used as a FQDN.
  • If AuthenticationMethod is set to userIdPassword, the value of the ServicePrincipalName property is ignored.

Example

The following is an example of a valid service principal name.

cassandra/myserver.test.com@EXAMPLE.COM

Default

Driver builds value based on environment

See also