You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Joel Shepherd (Jira)" <ji...@apache.org> on 2025/07/16 00:11:00 UTC

[jira] [Updated] (CASSANDRA-20768) CEP-50: Authentication Negotiation

     [ https://issues.apache.org/jira/browse/CASSANDRA-20768?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joel Shepherd updated CASSANDRA-20768:
--------------------------------------
    Change Category: Operability
         Complexity: Normal

> CEP-50: Authentication Negotiation
> ----------------------------------
>
>                 Key: CASSANDRA-20768
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-20768
>             Project: Apache Cassandra
>          Issue Type: Epic
>          Components: Client/java-driver, Feature/Authorization
>            Reporter: Joel Shepherd
>            Assignee: Joel Shepherd
>            Priority: Normal
>
> CEP-50 proposes a negotiation mechanism implemented using Cassandra's existing native protocol that will enable clients to tell the node what authentication mechanisms they support, and enabling the node to use its most preferred authenticator that the client supports.
> Link: https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-50%3A+Authentication+Negotiation
> The goals of CEP-50 are:
>  * Enable clients to negotiate an authentication method with a node at time of connection via the existing native protocol.
>  * Reduce the effort and risk of changing authentication method for a running cluster.
>  * Enable operators to more easily enable environment-specific authentication mechanisms.
>  * Provide seamless backwards-compatible interoperability for existing clients and nodes that don't support authenticator negotiation.
> Out-of-scope: {color:#000000}Other initiatives mentioned in CEP-31 — user-specific negotiation, multiple role managers, authorization features, negotiated inter-node authentication, specific authentication mechanisms — are out of scope of this CEP. These additional initiatives are either extensions of a basic authenticator negotiation solution, or touch on orthogonal concerns like authorization and inter-node authentication.{color}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org