You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Tiago L. Alves (Jira)" <ji...@apache.org> on 2025/02/26 13:57:00 UTC

[jira] [Commented] (CASSANDRA-20368) Improves error messages when initializing auth* classes

    [ https://issues.apache.org/jira/browse/CASSANDRA-20368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17930695#comment-17930695 ] 

Tiago L. Alves commented on CASSANDRA-20368:
--------------------------------------------

Green CI run: http://35.228.140.106:8080/job/cassandra/169/

> Improves error messages when initializing auth* classes
> -------------------------------------------------------
>
>                 Key: CASSANDRA-20368
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-20368
>             Project: Apache Cassandra
>          Issue Type: Improvement
>          Components: Feature/Authorization
>            Reporter: Tiago L. Alves
>            Assignee: Tiago L. Alves
>            Priority: Normal
>             Fix For: 5.0.x
>
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> Failures when setting up auth/authz in Cassandra show be more made more clear.
> Issues noticed are:
>  * When configuring `PasswordAuthenticator` with a custom IRoleManager implementation, the message will report "CassandraRoleManager must be used with PasswordAuthenticator". "CassandraRoleManager" can be used with any `IAuthenticator` implementation. The issue here is that `PasswordAuthenticator` requires using `CassandraRoleManager` because it has an implicit dependency on how passwords are created by it.
>  * If we're configuring `MutualTlsWithPasswordFallbackAuthenticator` with another `IRoleManager` implementation we'll see a message that we're using `PasswordAuthenticator` which is incorrect.
>  * When enabling authorization without enabling authentication, error message just says that "[IAuhtenticator] can't be used with [IAuthorizer]" without explaining why
>  * Exceptions thrown when instantiating auth* classes are swallowed preventing users to understand what the issue was.
>  
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org