[ https://issues.apache.org/jira/browse/CASSANDRA-9333?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16097099#comment-16097099 ]
Varun Barala edited comment on CASSANDRA-9333 at 7/22/17 4:12 AM: ------------------------------------------------------------------ In this scenario, You can use nodetool command like:- {{$ bin/nodetool -u cassandra status}} then It'll ask for password If your password is empty then just hit enter. Though nodetool should accept {{$ bin/nodetool -u cassandra -pw status}}. I'll go through the code. was (Author: varuna): In this scenario, You can use nodetool command like:- "$ bin/nodetool -u cassandra status" then It'll ask for password If your password is empty then just hit enter. Though nodetool should accept "$ bin/nodetool -u cassandra -pw status". I'll go through the code. > Edge case - Empty of blank password for JMX authentication not handled > properly in nodetool commands > ---------------------------------------------------------------------------------------------------- > > Key: CASSANDRA-9333 > URL: https://issues.apache.org/jira/browse/CASSANDRA-9333 > Project: Cassandra > Issue Type: Bug > Components: Tools > Environment: Apache Cassandra 2.1.2 > Reporter: Sumod Pawgi > Priority: Minor > Labels: security > Fix For: 2.1.x > > > While setting up JMX authentication for Apache Cassandra, if we set the > password blank (in the file - jmxremote.password), nodetool commands do not > work > example creds are cassandra cassandra. In this case, for a secured cluster, > we run the nodetool command as - nodetool -u cassandra -pw cassandra status > But if the password is kept as blank then we cannot execute nodetool command. > However, I believe that if a third party software used JMX authentication via > API, then they can use blank password for the operations. So this behavior > needs to be clarified and be consistent for this edge case scenario. -- This message was sent by Atlassian JIRA (v6.4.14#64029) --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org