You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@cassandra.apache.org by Yang <te...@gmail.com> on 2010/10/18 06:26:17 UTC

Cassandra security model? ( or, authentication docs ?)

I see that the raw thrift API has  a   login() method,
but when I setup a one-node cluster, I can simply connect
localhost/9160 without any passwd

what is the current picture of the security model? how can I enforce
authentication?

I searched around, it seems that this is not clearly documented yet;
the closest I found is:
http://www.riptano.com/docs/0.6.5/install/auth-config
http://cassandra-user-incubator-apache-org.3065146.n2.nabble.com/Authentication-td5285013.html#a5285013

I did start cassandra with the args mentioned above:

bin/cassandra -Dpasswd.properties=mypasswd.properties
-Daccess.properties=myaccess.properties -f

but then I can still simply use the command line interface to
connect localhost/9160
use myKeyspace

without any authentication passwd

Re: Cassandra security model? ( or, authentication docs ?)

Posted by Jeremy Hanna <je...@gmail.com>.
just as an fyi, I created something in the wiki yesterday - it's just a start though - http://wiki.apache.org/cassandra/ExtensibleAuth
there's also a FAQ entry on it now - http://wiki.apache.org/cassandra/FAQ#auth
just for going forward - on the wiki itself, just trying to help there.

On Oct 19, 2010, at 3:06 AM, Yang wrote:

> Thanks a lot
> 
> On Mon, Oct 18, 2010 at 11:44 AM, Eric Evans <ee...@rackspace.com> wrote:
>> On Sun, 2010-10-17 at 21:26 -0700, Yang wrote:
>>> I searched around, it seems that this is not clearly documented yet;
>>> the closest I found is:
>>> http://www.riptano.com/docs/0.6.5/install/auth-config
>>> http://cassandra-user-incubator-apache-org.3065146.n2.nabble.com/Authentication-td5285013.html#a5285013
>>> 
>>> I did start cassandra with the args mentioned above:
>>> 
>>> bin/cassandra -Dpasswd.properties=mypasswd.properties
>>> -Daccess.properties=myaccess.properties -f
>> 
>> Try
>> http://www.riptano.com/docs/0.6.5/install/storage-config#Authenticator
>> 
>> 
>> --
>> Eric Evans
>> eevans@rackspace.com
>> 
>> 


Re: Cassandra security model? ( or, authentication docs ?)

Posted by Yang <te...@gmail.com>.
Thanks a lot

On Mon, Oct 18, 2010 at 11:44 AM, Eric Evans <ee...@rackspace.com> wrote:
> On Sun, 2010-10-17 at 21:26 -0700, Yang wrote:
>> I searched around, it seems that this is not clearly documented yet;
>> the closest I found is:
>> http://www.riptano.com/docs/0.6.5/install/auth-config
>> http://cassandra-user-incubator-apache-org.3065146.n2.nabble.com/Authentication-td5285013.html#a5285013
>>
>> I did start cassandra with the args mentioned above:
>>
>> bin/cassandra -Dpasswd.properties=mypasswd.properties
>> -Daccess.properties=myaccess.properties -f
>
> Try
> http://www.riptano.com/docs/0.6.5/install/storage-config#Authenticator
>
>
> --
> Eric Evans
> eevans@rackspace.com
>
>

Re: Cassandra security model? ( or, authentication docs ?)

Posted by Eric Evans <ee...@rackspace.com>.
On Sun, 2010-10-17 at 21:26 -0700, Yang wrote:
> I searched around, it seems that this is not clearly documented yet;
> the closest I found is:
> http://www.riptano.com/docs/0.6.5/install/auth-config
> http://cassandra-user-incubator-apache-org.3065146.n2.nabble.com/Authentication-td5285013.html#a5285013
> 
> I did start cassandra with the args mentioned above:
> 
> bin/cassandra -Dpasswd.properties=mypasswd.properties
> -Daccess.properties=myaccess.properties -f

Try
http://www.riptano.com/docs/0.6.5/install/storage-config#Authenticator


-- 
Eric Evans
eevans@rackspace.com