Re: Ldap/AD Authentication

2022-09-15 Thread Slater, Ben
Product Officer, Instaclustr by NetApp ben.sla...@netapp.com From: Abdul Patel Date: Thursday, 15 September 2022 at 22:34 To: user@cassandra.apache.org Subject: Ldap/AD Authentication NetApp Security WARNING: This is an external email. Do not click links or open attachments unless you recognize the

Ldap/AD Authentication

2022-09-15 Thread Abdul Patel
Hi All, Do we have any open source ldap/AD pkgs/software for caasandra? I see instacluster has some but seems thats paid one.

Re: Impact of enabling authentication on performance

2020-06-04 Thread Sam Tunnicliffe
DSR> From: Jeff Jirsa mailto:jji...@gmail.com>> > DSR> Sent: Tuesday, June 2, 2020 2:39 AM > DSR> To: user@cassandra.apache.org <mailto:user@cassandra.apache.org> > DSR> Subject: [EXTERNAL] Re: Impact of enabling authentication on performance > > DS

Re: Impact of enabling authentication on performance

2020-06-03 Thread Gil Ganz
rmissions is picked up (usually less). > > > DSR> Sean Durity > > DSR> -Original Message- > DSR> From: Jeff Jirsa > DSR> Sent: Tuesday, June 2, 2020 2:39 AM > DSR> To: user@cassandra.apache.org > DSR> Subject: [EXTERNAL] Re: Impact of enabling

Re: Impact of enabling authentication on performance

2020-06-03 Thread Alex Ott
> Subject: [EXTERNAL] Re: Impact of enabling authentication on performance DSR> Set the Auth cache to a long validity DSR> Don’t go crazy with RF of system auth DSR> Drop bcrypt rounds if you see massive cpu spikes on reconnect storms >> On Jun 1, 2020, at 11:26 PM, Gil Ganz

RE: Impact of enabling authentication on performance

2020-06-02 Thread Durity, Sean R
authentication on performance Set the Auth cache to a long validity Don’t go crazy with RF of system auth Drop bcrypt rounds if you see massive cpu spikes on reconnect storms > On Jun 1, 2020, at 11:26 PM, Gil Ganz wrote: > >  > Hi > I have a production 3.11.6 cluster which I'm

Re: Impact of enabling authentication on performance

2020-06-01 Thread Jeff Jirsa
Set the Auth cache to a long validity Don’t go crazy with RF of system auth Drop bcrypt rounds if you see massive cpu spikes on reconnect storms > On Jun 1, 2020, at 11:26 PM, Gil Ganz wrote: > >  > Hi > I have a production 3.11.6 cluster which I'm might want to enable

Impact of enabling authentication on performance

2020-06-01 Thread Gil Ganz
Hi I have a production 3.11.6 cluster which I'm might want to enable authentication in, I'm trying to understand what will be the performance impact, if any. I understand each use case might be different, trying to understand if there is a common % people usually see their performance

Re: Nodetool Authentication

2017-10-06 Thread Akshit Jain
ad access" are you refering to? Can you point out in the > tutorial? > > On fre, 2017-10-06 at 14:03 +0530, Akshit Jain wrote: > > Hi, > For nodetool authentication I'm following this: > https://support.datastax.com/hc/en-us/articles/204226179- > Step-by-step-instruct

Re: Nodetool Authentication

2017-10-06 Thread Horia Mocioi
Which exactly "read access" are you refering to? Can you point out in the tutorial? On fre, 2017-10-06 at 14:03 +0530, Akshit Jain wrote: Hi, For nodetool authentication I'm following this: https://support.datastax.com/hc/en-us/articles/204226179-Step-by-step-instructions-f

Nodetool Authentication

2017-10-06 Thread Akshit Jain
Hi, For nodetool authentication I'm following this: https://support.datastax.com/hc/en-us/articles/204226179-Step-by-step-instructions-for-securing-JMX-authentication-for-nodetool-utility-OpsCenter-and-JConsole <https://support.datastax.com/hc/en-us/articles/204226179-Step-by-step-inst

Re: Internal Security - Authentication & Authorization

2017-03-15 Thread Sam Tunnicliffe
> > Here is what I have pieced together. Please let me know if I am on the > right track. You're more or less right regarding the built in authenticator/authorizer/role manager (which are usually referred to as "internal" as they store their data in Cassandra tables). One important thing to note

Re: Internal Security - Authentication & Authorization

2017-03-15 Thread kurt greaves
Jacob, seems you are on the right track however my understanding is that only the user that was auth'd has their permissions/roles/creds cached. Also. Cassandra will query at QUORUM for the "cassandra" user, and at LOCAL_ONE for *all* other users. This is the same for creating users/roles.

Re: Internal Security - Authentication & Authorization

2017-03-14 Thread Jai Bheemsen Rao Dhanwada
I have similar question. when we create users or roles what is the consistency level used? I know, If NOT EXISTS will use SERIAL consistency. what consistency will be used if just use CREATE USER ? On Mon, Mar 13, 2017 at 7:09 PM, Jacob Shadix wrote: > I'm looking for a deeper understanding of

Internal Security - Authentication & Authorization

2017-03-13 Thread Jacob Shadix
I'm looking for a deeper understanding of how Cassandra interacts with the system_auth keyspace to authenticate/authorize users. Here is what I have pieced together. Please let me know if I am on the right track. A user attempts to connect to Cassandra. Cassandra checks against system_auth for th

Re: Authentication with Java driver

2017-02-09 Thread Ben Bromhead
olbert > wrote: > > Hello, > > The API seems kind of not correct because credentials should be > usually set with a session but actually they are set with a cluster. > > > With the datastax driver, Session is what manages connection pools to > each node. Cluster manages

Re: Authentication with Java driver

2017-02-08 Thread Yuji Ito
t; each node. Cluster manages configuration and a separate connection > ('control connection') to subscribe to state changes (schema changes, node > topology changes, node up/down events). > > > So, if there are 1000 clients, then with this API it has to create > 100

Re: Authentication with Java driver

2017-02-07 Thread Ben Bromhead
Session is what manages connection pools to each node. Cluster manages configuration and a separate connection ('control connection') to subscribe to state changes (schema changes, node topology changes, node up/down events). So, if there are 1000 clients, then with this API it has to

Re: Authentication with Java driver

2017-02-07 Thread Yuji Ito
(schema changes, node >> topology changes, node up/down events). >> >> >> So, if there are 1000 clients, then with this API it has to create >> 1000 cluster instances ? >> >> >> I'm unsure how common it is for per-user authentication to be done

Re: Authentication with Java driver

2017-02-07 Thread Ben Bromhead
ith this API it has to create > 1000 cluster instances ? > > > I'm unsure how common it is for per-user authentication to be done when > connecting to the database. I think an application would normally > authenticate with one set of credentials instead of multiple. The protoc

Re: Authentication with Java driver

2017-02-07 Thread Andrew Tolbert
x27;control connection') to subscribe to state changes (schema changes, node topology changes, node up/down events). So, if there are 1000 clients, then with this API it has to create > 1000 cluster instances ? I'm unsure how common it is for per-user authentication to be done when connec

Re: Authentication with Java driver

2017-02-07 Thread Hiroyuki Yamada
users for multiple instances > with Java driver. > For instance, each thread creates a instance to access Cassandra with > authentication. > > As the implementation example, only the first constructor builds a cluster > and a session. > Other constructors use them. > This ex

Authentication with Java driver

2017-02-06 Thread Yuji Ito
Hi all, I want to know how to authenticate Cassandra users for multiple instances with Java driver. For instance, each thread creates a instance to access Cassandra with authentication. As the implementation example, only the first constructor builds a cluster and a session. Other constructors

Re: Cassandra Authentication

2017-01-18 Thread Jai Bheemsen Rao Dhanwada
most users I would suggest 3 < RF <=5 is sufficient. Also make sure >> you don't use the user "Cassandra" in production as authentication queries >> are done at QUORUM. >> >> On Wed, 18 Jan 2017 at 13:41 Jai Bheemsen Rao Dhanwada < >> jaibheem...@gma

Re: Cassandra Authentication

2017-01-18 Thread Ben Bromhead
N and we also control and > manage users, however that entails it's own set of challenges and > maintenance. > > For most users I would suggest 3 < RF <=5 is sufficient. Also make sure > you don't use the user "Cassandra" in production as authentication queries

Re: Cassandra Authentication

2017-01-18 Thread Jai Bheemsen Rao Dhanwada
ntails it's own set of challenges and > maintenance. > > For most users I would suggest 3 < RF <=5 is sufficient. Also make sure > you don't use the user "Cassandra" in production as authentication queries > are done at QUORUM. > > On Wed, 18 Jan 2017 at

Re: Cassandra Authentication

2017-01-18 Thread Ben Bromhead
We have a process that syncs and manages RF==N and we also control and manage users, however that entails it's own set of challenges and maintenance. For most users I would suggest 3 < RF <=5 is sufficient. Also make sure you don't use the user "Cassandra" in production

Cassandra Authentication

2017-01-18 Thread Jai Bheemsen Rao Dhanwada
Hello, When enabling Authentication on cassandra, is it required to set the RF same as the no.of nodes( https://docs.datastax.com/en/cql/3.1/cql/cql_using/update_ks_rf_t.html)? or can I live with RF of 3 in each DC (other KS are using 3) If it has to be equal to the number of nodes then, every

RE: Set up authentication on a live production cluster

2016-08-02 Thread SEAN_R_DURITY
Thanks for the updates on later versions. My experience on authentication was mostly 1.1 – 2.0. I am glad that it is improving a bit. However, it does seem that it is still wise to start rings with authentication on to avoid this activation procedure. Sean Durity From: li...@beobal.com

Re: Set up authentication on a live production cluster

2016-08-02 Thread Sam Tunnicliffe
x27;t go about setting up your roles until all nodes in the cluster are on 2.2 or higher, but if they are, then you can. With open source Cassandra you cannot implement authentication without at > least a brief degradation of service (as nodes can’t authenticate) and an > outage (while the key

Re: Set up authentication on a live production cluster

2016-08-02 Thread Jai
> there start their Cassandra in production without security and wake up some > days, too late > >> On Wed, Apr 13, 2016 at 10:54 PM, wrote: >> Do the clients already send the credentials? That is the first thing to >> address. >> >> >> >>

Re: Set up authentication on a live production cluster

2016-08-02 Thread DuyHai Doan
ddress. > > > > Setting up a cluster for authentication (and authorization) requires a > restart with the properties turned on in cassandra.yaml. However, the > actual keyspace (system_auth) and tables are not created until the last > node is restarted with the parameters chang

RE: Set up authentication on a live production cluster

2016-04-13 Thread SEAN_R_DURITY
Do the clients already send the credentials? That is the first thing to address. Setting up a cluster for authentication (and authorization) requires a restart with the properties turned on in cassandra.yaml. However, the actual keyspace (system_auth) and tables are not created until the last

Set up authentication on a live production cluster

2016-04-13 Thread Vigneshwaran
Hi, I have setup a 16 node cluster (8 per DC; C* 2.2.4) up and running in our production setup. We use Datastax Java driver 2.1.8. I would like to set up Authentication and Authorization in the cluster without breaking the live clients. >From the references I found by googling, I can se

RE: External authentication options for C* (no DSE)

2015-12-29 Thread SEAN_R_DURITY
You can write your own using the appropriate interface(s) (for authentication and authorization). However, the interfaces have changed over the years, so it is likely not a write it and forget it bit of code. External security is one of the important features of DSE, though. Sean Durity – Lead

Re: External authentication options for C* (no DSE)

2015-12-23 Thread Giampaolo Trapasso
Search a bit deeper in DSE docs, I've found this: http://www.datastax.com/wp-content/themes/datastax-2014-08/files/FF-DataStax-AdvancedSecurity.pdf . Pratically no external authentication is available for Apache Cassandra. giampaolo 2015-12-23 15:13 GMT+01:00 Giampaolo Tra

External authentication options for C* (no DSE)

2015-12-23 Thread Giampaolo Trapasso
Hi, while for DSE versions of C* it's quite clear what external authentication options are available, I'm not sure about DSC or Apache versions. Can anyone point me to the right documentation on or provide a list of possibilities? Thank you in advance. giampaolo

authentication with cassandra-stress 2.1

2014-11-06 Thread James Derieg
#x27;cassandra-stress -D nodesfile -un -pw ' The 2.1 version has been totally reworked, and that command fails completely. Looking through the documentation reveals nothing about authenication to cassandra. Google searches have turned up nothing since it's so new. I did try one sugg

Re: Authentication is failing.

2014-09-28 Thread Pinak Pani
Phone: +46 708 84 18 32 Web: www.tink.se Facebook Linkedin Twitter >> >> >> On Sun, Sep 28, 2014 at 11:08 AM, Pinak Pani < >> nishant.has.a.quest...@gmail.com> wrote: >> >>> Hi, >>> >>> I have been toying around with CQL. I realized when

Re: Authentication is failing.

2014-09-28 Thread Philip Thompson
On Sun, Sep 28, 2014 at 11:08 AM, Pinak Pani < > nishant.has.a.quest...@gmail.com> wrote: > >> Hi, >> >> I have been toying around with CQL. I realized when I GRANT SELECT I lose >> authentication. Here is the process: Can someone point out what is w

Re: Authentication is failing.

2014-09-28 Thread Jens Rantil
wrote: > Hi, > I have been toying around with CQL. I realized when I GRANT SELECT I lose > authentication. Here is the process: Can someone point out what is wrong? > ➜ apache-cassandra-2.1.0 bin/cqlsh -u cassandra -p cassandra > Connected to Test Cluster at 127.0.0.1:9042.

Authentication is failing.

2014-09-28 Thread Pinak Pani
Hi, I have been toying around with CQL. I realized when I GRANT SELECT I lose authentication. Here is the process: Can someone point out what is wrong? ➜ apache-cassandra-2.1.0 bin/cqlsh -u cassandra -p cassandra Connected to Test Cluster at 127.0.0.1:9042. [cqlsh 5.0.1 | Cassandra 2.1.0

Authentication for Mx4j

2014-07-31 Thread Rahul Neelakantan
Does anyone know how to enable basic authentication of MX4J with Cassandra? Mx4j supports it but not sure how to pass the variables to enable it. I was able to set the listen address and port for the http server, but can't get authentication to work. Rahul Neelakantan

Re: Authentication exception

2014-07-30 Thread Jeremy Jongsma
Yes, and all nodes have had at least two more scheduled repairs since then. On Jul 30, 2014 1:47 AM, "Or Sher" wrote: > Did you ran a repair after changing replication factor for system_auth ? > > > On Tue, Jul 29, 2014 at 5:48 PM, Jeremy Jongsma > wrote: > >> This is still happening to me; is t

Re: Authentication exception

2014-07-29 Thread Or Sher
Did you ran a repair after changing replication factor for system_auth ? On Tue, Jul 29, 2014 at 5:48 PM, Jeremy Jongsma wrote: > This is still happening to me; is there anything else I can check? All > nodes have NTP installed, all are in sync, all have open communication to > each other. But

Re: Authentication exception

2014-07-29 Thread Jeremy Jongsma
This is still happening to me; is there anything else I can check? All nodes have NTP installed, all are in sync, all have open communication to each other. But usually first thing in the morning, I get this auth exception. A little while later, it starts working. I'm very puzzled. On Tue, Jul 22

Re: Authentication exception

2014-07-22 Thread Jeremy Jongsma
Verified all clocks are in sync. On Mon, Jul 21, 2014 at 10:03 PM, Rahul Menon wrote: > I could you perhaps check your ntp? > > > On Tue, Jul 22, 2014 at 3:35 AM, Jeremy Jongsma > wrote: > >> I routinely get this exception from cqlsh on one of my clusters: >> >> cql.cassandra.ttypes.Authentica

Re: Authentication exception

2014-07-21 Thread Rahul Menon
I could you perhaps check your ntp? On Tue, Jul 22, 2014 at 3:35 AM, Jeremy Jongsma wrote: > I routinely get this exception from cqlsh on one of my clusters: > > cql.cassandra.ttypes.AuthenticationException: > AuthenticationException(why='org.apache.cassandra.exceptions.ReadTimeoutException: >

Authentication exception

2014-07-21 Thread Jeremy Jongsma
I routinely get this exception from cqlsh on one of my clusters: cql.cassandra.ttypes.AuthenticationException: AuthenticationException(why='org.apache.cassandra.exceptions.ReadTimeoutException: Operation timed out - received only 2 responses.') The system_auth keyspace is set to replicate X times

Re: Cassandra Client authentication and system table replication question

2014-04-30 Thread Julien Campan
-04-30 6:50 GMT+01:00 Anand Somani : > Correction credentials are stored in the system_auth table, so it is > ok/recommended to change the replication factor of that keyspace? > > > On Tue, Apr 29, 2014 at 10:41 PM, Anand Somani wrote: > >> Hi >> >> We have enabled

Re: Cassandra Client authentication and system table replication question

2014-04-29 Thread Anand Somani
Correction credentials are stored in the system_auth table, so it is ok/recommended to change the replication factor of that keyspace? On Tue, Apr 29, 2014 at 10:41 PM, Anand Somani wrote: > Hi > > We have enabled cassandra client authentication and have set new user/pass > per ke

Cassandra Client authentication and system table replication question

2014-04-29 Thread Anand Somani
Hi We have enabled cassandra client authentication and have set new user/pass per keyspace. As I understand user/pass is stored in the system table, do we need to change the replication factor of the system table so this data is replicated? The cluster is going to be multi-dc. Thanks Anand

Re: user / password authentication advice

2013-12-12 Thread John Sanda
You could use CassandraAuthorizer and PaaswordAuthenticator which ships with Cassandra. See this article[1] for a good overview. [1] http://www.datastax.com/dev/blog/a-quick-tour-of-internal-authentication-and-authorization-security-in-datastax-enterprise-and-apache-cassandra On Thursday

Re: user / password authentication advice

2013-12-11 Thread onlinespending
OK, thanks for getting me going in the right direction. I imagine most people would store password and tokenized authentication information in a single table, using the username (e.g. email address) as the key? On Dec 11, 2013, at 10:44 PM, Janne Jalkanen wrote: > > Hi! > >

Re: user / password authentication advice

2013-12-11 Thread Janne Jalkanen
Hi! You're right, this isn't really Cassandra-specific. Most languages/web frameworks have their own way of doing user authentication, and then you just typically write a plugin that just stores whatever data the system needs in Cassandra. For example, if you're using Ja

Re: user / password authentication advice

2013-12-11 Thread Aaron Morton
Not sure if you are asking about the authentication & authorisation in cassandra or how to implemented the same using cassandra. info on the cassandra authentication and authorisation is here http://www.datastax.com/documentation/cassandra/2.0/webhelp/index.html#cassandra/secu

user / password authentication advice

2013-12-11 Thread onlinespending
Hi, I’m using Cassandra in an environment where many users can login to use an application I’m developing. I’m curious if anyone has any advice or links to documentation / blogs where it discusses common implementations or best practices for user and password authentication. My cursory search

Re: High CPU usage with authentication enabled

2013-08-21 Thread Joshua M. Thompson
e light-weight, like MD5. It's not ideal but it's better than turning off authentication altogether.

Re: High CPU usage with authentication enabled

2013-08-21 Thread Nate McCall
something obvious I'm missing here. > > Basically, everything runs great as long as authentication is disabled > (using the AllowAll* modules.) In that configuration CPU usage on the > application servers and the Cassandra servers is minimal. But as soon as > enable authentication the CPU

High CPU usage with authentication enabled

2013-08-21 Thread Joshua M. Thompson
e. Basically, everything runs great as long as authentication is disabled (using the AllowAll* modules.) In that configuration CPU usage on the application servers and the Cassandra servers is minimal. But as soon as enable authentication the CPU usage on the Cassandra nodes shoots up to around 150%

Re: Added nodes to cluster, authentication stopped working

2013-07-07 Thread sankalp kohli
gt; have to be logged in and not anonymous to perform this request'. > > When I created the Cluster I disabled the 'cassandra' superuser and now I > can't do anything on my Cluster. > > Is there any method to reset a user and/or password, or recreate a new > superus

Added nodes to cluster, authentication stopped working

2013-07-03 Thread Carlos Rolo
t do anything on my Cluster. Is there any method to reset a user and/or password, or recreate a new superuser?? Otherwise I need to drop all the data from the cluster... Since even disabling authentication and authorization my clients give errors writting data.

Re: Custom 1.2 Authentication plugin will not work unless user is in system_auth.users column family

2013-06-25 Thread Bao Le
Sorry for not following up on this one in time. I filed a JIRA (5651) and it seems user lookup is here to stay. https://issues.apache.org/jira/browse/CASSANDRA-5651?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel On a related note, that column family is, by default, set up to h

Re: Custom 1.2 Authentication plugin will not work unless user is in system_auth.users column family

2013-06-17 Thread Dave Brosius
. When upgrading to C* 1.2.5, authentication failed. Turn out that in ClientState.login, we make a call to Auth.isExistingUser(user.getName()) if the AuthenticatedUser is not Anonymous user. This isExistingUser method does a query on system_auth.users and if it cannot find the name there, throw

Custom 1.2 Authentication plugin will not work unless user is in system_auth.users column family

2013-06-17 Thread Bao Le
Hi,     We have a custom  authenticator that works well with Cassandra 1.1.5. When upgrading to C* 1.2.5, authentication failed. Turn out that in ClientState.login, we make a call to Auth.isExistingUser(user.getName()) if the AuthenticatedUser is not Anonymous user. This isExistingUser method

Re: Authentication and Authorization with Cassandra 1.2.2.

2013-02-26 Thread Jeremy Hanna
does this help? Links at the bottom show the cql statements to add/modify users: http://www.datastax.com/docs/1.2/security/native_authentication On Feb 26, 2013, at 4:06 PM, C.F.Scheidecker Antunes wrote: > Hello all, > > Cassandra has changed and now has a default authentic

1.2 Authentication

2013-01-28 Thread Daning Wang
cql.cassandra.ttypes.AuthenticationException: AuthenticationException(why="User doesn't exist - create it with CREATE USER query first") What does "create it with CREATE USER query first" mean? I put debug information in SimpleAuthenticator class, that showed authentication is passed in the authenticate() method. Thanks, Daning

Re: Cassandra Authentication

2012-06-29 Thread Peter Dijkshoorn
to an operational setting based on Amazon AWS. What are best >> practices for addessing security for Cassandra on AWS. Besides Security >> Groups in AWS how is Cassandra Client to Cluster authentication handled >> best? There used to be a SimpleAuthenticator that has been moved

Re: Cassandra Authentication

2012-06-28 Thread Mohit Anchlia
or Cassandra on AWS. Besides Security > Groups in AWS how is Cassandra Client to Cluster authentication handled best? > There used to be a SimpleAuthenticator that has been moved to Examples. > > Any recommendations/experiences that you could share? Any hints and guidance > is hi

Cassandra Authentication

2012-06-28 Thread Christof Bornhoevd
Hi, we are using Cassandra v1.0.8 with Hector v1.0-5 and would like to move our current system to an operational setting based on Amazon AWS. What are best practices for addessing security for Cassandra on AWS. Besides Security Groups in AWS how is Cassandra Client to Cluster authentication

Re: [Windows] How to configure simple authentication and authorization ?

2012-03-14 Thread Sabbiolina
, Maki Watanabe >> wrote: >> >>> Have you build and installed SimpleAuthenticator from the source >>> repository? >>> It is not included in the binary kit. >>> >>> maki >>> >>> 2012/3/14 Sabbiolina : >>> > HI. I foll

Re: [Windows] How to configure simple authentication and authorization ?

2012-03-14 Thread Tyler Hobbs
re do I put the files? > > > > > On Wed, Mar 14, 2012 at 8:43 AM, Maki Watanabe wrote: > >> Have you build and installed SimpleAuthenticator from the source >> repository? >> It is not included in the binary kit. >> >> maki >> >> 2

Re: [Windows] How to configure simple authentication and authorization ?

2012-03-14 Thread Sabbiolina
: > Have you build and installed SimpleAuthenticator from the source > repository? > It is not included in the binary kit. > > maki > > 2012/3/14 Sabbiolina : > > HI. I followed this: > > > > > > > > To set up simple authentication an

Re: [Windows] How to configure simple authentication and authorization ?

2012-03-14 Thread Maki Watanabe
Have you build and installed SimpleAuthenticator from the source repository? It is not included in the binary kit. maki 2012/3/14 Sabbiolina : > HI. I followed this: > > > > To set up simple authentication and authorization > 1. Edit cassa

[Windows] How to configure simple authentication and authorization ?

2012-03-13 Thread Sabbiolina
HI. I followed this: To set up simple authentication and authorization 1. Edit cassandra.yaml, setting org.apache.cassandra.auth.SimpleAuthenticator as the authenticator value. The default value of AllowAllAuthenticator is equivalent to no authentication. 2. Edit access.properties, adding

Re: datastax opscenter authentication

2012-01-23 Thread Nick Bailey
Unfortunately the current method using a password file is the only option for authentication in OpsCenter at the moment. I've noted PAM authentication as a feature request though. On Mon, Jan 23, 2012 at 8:16 AM, Ramesh Natarajan wrote: > I am trying to integrate opscenter in our environ

datastax opscenter authentication

2012-01-23 Thread Ramesh Natarajan
I am trying to integrate opscenter in our environment and I was wondering if we can use PAM authentication instead of a password file for opscenter authentication? thanks Ramesh

Re: Authentication setup

2011-10-22 Thread Alexander Konotop
s ideas about how to implement this for > now. > > > > > On Fri, Oct 21, 2011 at 6:53 PM, Alexander Konotop < > alexander.kono...@gmail.com> wrote: > > > Hello :-) > > Does anyone have a working config with normal secure authentication? > > I'v

Re: Authentication setup

2011-10-22 Thread Ertio Lew
r Konotop < alexander.kono...@gmail.com> wrote: > Hello :-) > Does anyone have a working config with normal secure authentication? > I've just installed Cassandra 1.0.0 and see that SimpleAuthenticate is > meant to be non-secure and was moved to examples. I need a production &

Authentication setup

2011-10-21 Thread Alexander Konotop
Hello :-) Does anyone have a working config with normal secure authentication? I've just installed Cassandra 1.0.0 and see that SimpleAuthenticate is meant to be non-secure and was moved to examples. I need a production config - so I've tried to write this to config: aut

Re: Pelops authentication

2011-09-05 Thread Dan Washusen
lement authentication to cassandra using > Pelops. > > Thanks

Re: Custom Authentication with Cassandra

2011-07-19 Thread Jonathan Ellis
It lets you insert data as if you were authorized? On Tue, Jul 19, 2011 at 2:55 PM, Chandrasekhar M wrote: > Hi, > > Appears to me that the CLI allows login even though there is an > authentication exception. > > At that point there is actually no user id/pwd, ie, both are emp

RE: Custom Authentication with Cassandra

2011-07-19 Thread Chandrasekhar M
Hi, Appears to me that the CLI allows login even though there is an authentication exception. At that point there is actually no user id/pwd, ie, both are empty strings. If necessary, I can send the code, I am using for the CustomAuthentication. Regards Chandra -Original Message

Re: Custom Authentication with Cassandra

2011-07-19 Thread Jonathan Ellis
On Tue, Jul 19, 2011 at 5:50 AM, Chandrasekhar M wrote: > If one logs into the client (Cassandra Cli) without a userid or password, an > exception is thrown, but login happens into the shell as default@unknown. Are you really authenticated at that point or does the cli just not know how to deal w

Custom Authentication with Cassandra

2011-07-19 Thread Chandrasekhar M
Hi, We are trying out Custom Authentication (with Database) with Cassandra, by implementing IAuthenticator interface. We are storing the following details in a properties file and passing the location of the properties file as a startup parameter to Cassandra 1. DB URL 2. DB

Re: Multi-tenancy, and authentication and authorization

2011-01-20 Thread indika kumara
I do not have a better knowledge about the Cassandra. As per my knowledge, there is no such a tool. I believe, such a tool would be worth. Thanks, Indika On Thu, Jan 20, 2011 at 6:15 PM, Mimi Aluminium wrote: > Hi, > > I have a question that somewhat related to the above. > Is there a tool that

Re: Multi-tenancy, and authentication and authorization

2011-01-20 Thread Mimi Aluminium
Hi, I have a question that somewhat related to the above. Is there a tool that predicts the resource consumption (i.e, memory, disk, CPU) in an offline mode? Means it is given with the storage conf parameters, ks, CFs and data model, and then application parameters such read/write average rates.

Re: Multi-tenancy, and authentication and authorization

2011-01-20 Thread David Boxenhorn
I have added my comments to this issue: https://issues.apache.org/jira/browse/CASSANDRA-2006 Good luck! On Thu, Jan 20, 2011 at 1:53 PM, indika kumara wrote: > Thanks David We decided to do it at our client-side as the initial > implementation. I will investigate the approaches for supporti

Re: Multi-tenancy, and authentication and authorization

2011-01-20 Thread indika kumara
Thanks David We decided to do it at our client-side as the initial implementation. I will investigate the approaches for supporting the fine grained control of the resources consumed by a sever, tenant, and CF. Thanks, Indika On Thu, Jan 20, 2011 at 3:20 PM, David Boxenhorn wrote: > As far

Re: Multi-tenancy, and authentication and authorization

2011-01-20 Thread David Boxenhorn
As far as I can tell, if Cassandra supports three levels of configuration (server, keyspace, column family) we can support multi-tenancy. It is trivial to give each tenant their own keyspace (e.g. just use the tenant's id as the keyspace name) and let them go wild. (Any out-of-bounds behavior on th

Re: Multi-tenancy, and authentication and authorization

2011-01-19 Thread indika kumara
+1 Are there JIRAs for these requirements? I would like to contribute from my capacity. As per my understanding, to support some muti-tenant models, it is needed to qualified keyspaces' names, Cfs' names, etc. with the tenant namespace (or id). The easiest way to do this would be to modify corre

Re: Multi-tenancy, and authentication and authorization

2011-01-19 Thread David Boxenhorn
Yes, the way I see it - and it becomes even more necessary for a multi-tenant configuration - there should be completely separate configurations for applications and for servers. - Application configuration is based on data and usage characteristics of your application. - Server configuration is b

Re: Multi-tenancy, and authentication and authorization

2011-01-19 Thread indika kumara
As the actual problem is mostly related to the number of CFs in the system (may be number of the columns), I still believe that supporting exposing the Cassandra ‘as-is’ to a tenant is doable and suitable though need some fixes. That multi-tenancy model allows a tenant to use the programming model

Re: Multi-tenancy, and authentication and authorization

2011-01-19 Thread David Boxenhorn
+1 On Wed, Jan 19, 2011 at 10:35 AM, Stu Hood wrote: > Opened https://issues.apache.org/jira/browse/CASSANDRA-2006 with the > solution we had suggested on the MultiTenant wiki page. > > > On Tue, Jan 18, 2011 at 11:56 PM, David Boxenhorn wrote: > >> I think tuning of Cassandra is overly comple

Re: Multi-tenancy, and authentication and authorization

2011-01-19 Thread David Boxenhorn
I'm not sure that "you'd still want to retain the ability to individually control how flushing happens on a per-cf basis in order to cater to different workloads that benefit from different flushing behavior". It seems to me like a good system-wide algorithm that works dynamically, and takes into a

Re: Multi-tenancy, and authentication and authorization

2011-01-19 Thread Peter Schuller
> Right now there is a one-to-one mapping between memtables and SSTables. > Instead of that, would it be possible to have one giant memtable for each > Cassandra instance, with partial flushing to SSTs? I think a complication here is that, although I agree things need to be easier to tweak at leas

Re: Multi-tenancy, and authentication and authorization

2011-01-19 Thread Stu Hood
Opened https://issues.apache.org/jira/browse/CASSANDRA-2006 with the solution we had suggested on the MultiTenant wiki page. On Tue, Jan 18, 2011 at 11:56 PM, David Boxenhorn wrote: > I think tuning of Cassandra is overly complex, and even with a single > tenant you can run into problems with to

Re: Multi-tenancy, and authentication and authorization

2011-01-18 Thread David Boxenhorn
I think tuning of Cassandra is overly complex, and even with a single tenant you can run into problems with too many CFs. Right now there is a one-to-one mapping between memtables and SSTables. Instead of that, would it be possible to have one giant memtable for each Cassandra instance, with parti

Re: Multi-tenancy, and authentication and authorization

2011-01-18 Thread Aaron Morton
I've used an S3 style data model with a REST interface (varnish > nginx > tornado > cassandra), users do not see anything remotely cassandra like. AaronOn 19 Jan, 2011,at 10:27 AM, Stephen Connolly wrote:I would imagine it to be somewhat easy to implement this via a thrift wrapper so that each ten

Re: Multi-tenancy, and authentication and authorization

2011-01-18 Thread Stephen Connolly
I would imagine it to be somewhat easy to implement this via a thrift wrapper so that each tenant is connecting to the proxy thrift server that masks the fact that there are multiple tenants... or is that how people are thinking about this - Stephen --- Sent from my Android phone, so random spell

  1   2   >