[
https://issues.apache.org/jira/browse/CASSANDRA-20368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17936255#comment-17936255
]
Stefan Miklosovic commented on CASSANDRA-20368:
-----------------------------------------------
repeats are somehow hairy but that's just flakiness
[trunk|https://app.circleci.com/pipelines/github/instaclustr/cassandra/5624/workflows/b1abf2a3-1f20-44e0-9ccb-5a9c1703a65c]
[5.0|https://app.circleci.com/pipelines/github/instaclustr/cassandra/5628/workflows/d9f75fc9-e548-4374-92a2-b9355550e86a]
> Improves error messages when initializing auth* classes
> -------------------------------------------------------
>
> Key: CASSANDRA-20368
> URL: https://issues.apache.org/jira/browse/CASSANDRA-20368
> Project: Apache Cassandra
> Issue Type: Improvement
> Components: Feature/Authorization
> Reporter: Tiago L. Alves
> Assignee: Tiago L. Alves
> Priority: Normal
> Fix For: 5.0.x, 5.x
>
> Attachments: latest_jdk11_x86_64.zip
>
> Time Spent: 6h
> Remaining Estimate: 0h
>
> Failures when setting up auth/authz in Cassandra show be more made more clear.
> Issues noticed are:
> * When configuring `PasswordAuthenticator` with a custom IRoleManager
> implementation, the message will report "CassandraRoleManager must be used
> with PasswordAuthenticator". "CassandraRoleManager" can be used with any
> `IAuthenticator` implementation. The issue here is that
> `PasswordAuthenticator` requires using `CassandraRoleManager` because it has
> an implicit dependency on how passwords are created by it.
> * If we're configuring `MutualTlsWithPasswordFallbackAuthenticator` with
> another `IRoleManager` implementation we'll see a message that we're using
> `PasswordAuthenticator` which is incorrect.
> * When enabling authorization without enabling authentication, error message
> just says that "[IAuhtenticator] can't be used with [IAuthorizer]" without
> explaining why
> * Exceptions thrown when instantiating auth* classes are swallowed
> preventing users to understand what the issue was.
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
