On Thu, 12 Nov 2009 10:11:27 -0600 Jonathan Ellis <jbel...@gmail.com> wrote: 

JE> 2009/11/12 Ted Zlatanov <t...@lifelogs.com>:
>> It sounds like JAAS is a bad idea.  I'll use a modular auth system then,
>> with two simple implementations (XML file and LDAP) at first.  The XML
>> file will hold account passwords (one-way hashed) and authorizations.

JE> wouldn't it be simpler to just put the password hash in the keyspace 
definition?

JE> it's less enterprise but if you need something sophisticated you're
JE> probably going to use ldap anyway...

It's less secure and merges the auth backend configuration with the
Cassandra configuration.  I was hoping to keep them separate.

Ted

Reply via email to