The documentation for setting up kerberos authentication for datastax enterprise demonstrates setting up principals for each C* node using FQDNs.
The service URI generated by the driver will effectively be dse@<rpc_address>, which may in fact work when used as the service principal depending on the kerberos server implementation, but it's possible it will not. For some reason the same kerberos server implementation i am using will handle IP addresses in service uris fine when using a FQDN principal on linux, but not on OS X.
The driver should by default resolve FQDN hostnames from ip address using some mechanism that ultimately uses getnameinfo (socket.getnameinfo() maybe?). Alternatively, there should be a mechanism to allow the user to override this behavior if they want to use IPs as is or some other strategy.
Thanks for addressing that. I merged with formatting tweaks and a unit test.
Looks great, everything runs clean. Moving to done.
What version is this fixed in?
On master now. t will be included in the 1.0 GA.