You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by Apache Wiki <wi...@apache.org> on 2013/09/06 04:45:43 UTC

[Cassandra Wiki] Update of "ExtensibleAuth" by JonathanEllis

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Cassandra Wiki" for change notification.

The "ExtensibleAuth" page has been changed by JonathanEllis:
https://wiki.apache.org/cassandra/ExtensibleAuth?action=diff&rev1=3&rev2=4

- == Cassandra's Extensible Authentication/Authorization ==
+ TODO: update this in light of http://www.planetcassandra.org/blog/post/a-quick-tour-of-internal-authentication-and-authorization-security-in-datastax-enterprise-and-apache-cassandra
  
- Cassandra uses an extensible authentication/authorization mechanism found in the org.apache.cassandra.auth Java source package.  It is configured in conf/storage-conf.xml (0.6.x) and conf/cassandra.yaml (0.7+).  0.6 uses the `IAuthenticator` interface to provide both authentication and authorization, but 0.7 splits the interface into `IAuthenticator` to provide authentication, and `IAuthority` to provide authorization.
- 
- There are two complementary implementations of these interfaces built-in:
- 
-  * The default `AllowAllAuthenticator` (and `AllowAllAuthority` in 0.7) approach is essentially pass-through.
-  * `SimpleAuthenticator` (and `SimpleAuthority` in 0.7) is property file based (using passwd.properties and access.properties).  For more information on this approach, see the source in org.apache.cassandra.auth. In 0.7, the format of the access.properties configuration is slightly different.
- 
- Both of the built-in options implement `IAuthenticator` (and `IAuthority` in 0.7).  Those wanting custom auth implementations can start there.
-