You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Clément Lardeur (JIRA)" <ji...@apache.org> on 2014/02/18 20:52:21 UTC
[jira] [Comment Edited] (CASSANDRA-6660) Make node tool command
take a password file
[ https://issues.apache.org/jira/browse/CASSANDRA-6660?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13904490#comment-13904490 ]
Clément Lardeur edited comment on CASSANDRA-6660 at 2/18/14 7:51 PM:
---------------------------------------------------------------------
bq. +1 on Brandon comment and also this JIRA requires a file. You might want to add an option to pass a file and read from it.
You can pass a path to the password file with the v2 patch.
bq. Also you might want to add imports explicitly.
I prefer to add static imports to improve the readibility of the code.
was (Author: clardeur):
| +1 on Brandon comment and also this JIRA requires a file. You might want to add an option to pass a file and read from it.
You can pass a path to the password file with the v2 patch.
| Also you might want to add imports explicitly.
I prefer to add static imports to improve the readibility of the code.
> Make node tool command take a password file
> -------------------------------------------
>
> Key: CASSANDRA-6660
> URL: https://issues.apache.org/jira/browse/CASSANDRA-6660
> Project: Cassandra
> Issue Type: Improvement
> Reporter: Vishy Kasar
> Assignee: Clément Lardeur
> Priority: Trivial
> Labels: nodetool
> Fix For: 2.1
>
> Attachments: trunk-6660-v1.patch, trunk-6660-v2.patch
>
>
> We are sending the jmx password in the clear to the node tool command in production. This is a security risk. Any one doing a 'ps' can see the clear password. Can we change the node tool command to also take a password file argument. This file will list the JMX user and passwords. Example below:
> cat /cassandra/run/10003004.jmxpasswd
> monitorRole abc
> controlRole def
> Based on the user name provided, node tool can pick up the right password.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)