|Configuring Authentication and Authorization / Configuring User Authentication|
To enable user authentication with GemFire XD, you must use a GemFire XD locator for member discovery. GemFire XD uses mutual authentication between the GemFire XD locator and subsequent GemFire XD members that boot and join the distributed system. User authentication is not supported if you use multicast for member discovery.
For servers and locators, specify -auth-provider=provider_name at the command line, or define the gemfirexd.auth-provider=provider_name property in the gemfirexd.properties file.
For development and testing only, specify BUILTIN as the provider name to use the GemFire XD built-in authentication mechanism. For production purposes, specify LDAP to use an existing LDAP repository, or specify the name of a custom provider class that implements the UserAuthenticator interface.
When using BUILTIN authentication, the locator must define all system user accounts as well as the authentication provider for the distributed system as a whole. GemFire XD uses the specified provider and users to perform mutual authentication when new members attempt to join the distributed system.
The mcast-port=0 entry indicates that multicast is not used in the GemFire XD distributed system. Valid locator properties would need to be supplied when starting the GemFire XD server, as well as the credentials for a GemFire XD user as described in Creating Users for BUILTIN Authentication.