Splice Machine Authentication

This topic provides top-level information about the authentiation mechanisms you can use with Splice Machine and how to access the configuration files used for authentication, in these sections:

   Learn more

Supported Authentication Mechanisms

You can use any of the following authentication mechanisms with Splice Machine; click the mechanism name link to navigate to a topic page that describes how to configure and use the mechanism.

Authentication Mechanism Description
None Any user ID and password combination is allowed to connect to database.
NATIVE

User IDs in a database table are validated against the corresponding, encrypted password.

This is the default authentication setting for Splice Machine installations.

KERBEROS

User IDs are validated against a Kerberos server.

ENTERPRISE ONLY: This feature is available only for the Splice Machine Enterprise version of our On-Premise Database product; contact Splice Machine Sales for information.

LDAP

User IDs are validated against an existing LDAP service.

ENTERPRISE ONLY: This feature is available only for the Splice Machine Enterprise version of our On-Premise Database product; contact Splice Machine Sales for information.

Configuring Authentication on Your Platform

You can configure authentication for your Splice Machine database by adding or modifying properties in your HBase configuration file. The location of the configuration file you need to modify depends on which platform you’re using:

Platform Configuration file to modify with your authentication properties
CDH hbase-site.xml
HDP Select the Custom HBase Configs option from the HBase configuration tab.
MapR hbase-site.xml
Standalone version splicemachine/lib/splice-site.xml

Specific property settings are listed on the topic page for each authentication mechanism, as listed in the previous section.

Disabling Authentication

To disable authentication for your Splice Machine database, set the splice.authentication property in your configuration file to NONE:

<property>
   <name>splice.authentication</name>
   <value>NONE</value>
</property>

Splice Machine strongly encourages you to not use an open database for production databases!