You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@cassandra.apache.org by "Jeff Jirsa (JIRA)" <ji...@apache.org> on 2016/01/29 21:20:39 UTC

[jira] [Created] (CASSANDRA-11097) Idle session timeout for secure environments

Jeff Jirsa created CASSANDRA-11097:
--------------------------------------

             Summary: Idle session timeout for secure environments
                 Key: CASSANDRA-11097
                 URL: https://issues.apache.org/jira/browse/CASSANDRA-11097
             Project: Cassandra
          Issue Type: Improvement
            Reporter: Jeff Jirsa
            Priority: Minor


A thread on the user list pointed out that some use cases may prefer to have a database disconnect sessions after some idle timeout. An example would be an administrator who connected via ssh+cqlsh and then walked away. Disconnecting that user and forcing it to re-authenticate could protect against unauthorized access.

It seems like it may be possible to do this using a netty {{IdleStateHandler}} in a way that's low risk and perhaps off by default.  



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)