Cluster Member Security

Hazelcast supports the standard Java Security (JAAS) based authentication between the cluster members. A Security Realm can be referenced by <member-authentication/> element to define authentication between the member and identity of the current member.

XML

xml

<hazelcast>
    ...
    <security enabled="true">
      <realms>
          <realm name="memberRealm">
              <authentication>
                <ldap>
                    <url>ldap://corp-ldap.example.com/</url>
                </ldap>
              </authentication>
              <identity>
                <username-password username="uid=member1,dc=example,dc=com" password="s3crEt"/>
              </identity>
          </realm>
      </realms>
      <member-authentication realm="memberRealm"/>
    </security>
    ...
</hazelcast>

YAML

yaml

hazelcast:
  security:
    enabled: true
    realms:
      name: memberRealm
      authentication:
        ldap:
          url: ldap://corp-ldap.example.com
      identity:
        username-password:
          username: uid=member1,dc=example,dc=com
          password: s3crEt
    member-authentication:
      realm: memberRealm