I see that the raw thrift API has  a   login() method,
but when I setup a one-node cluster, I can simply connect
localhost/9160 without any passwd

what is the current picture of the security model? how can I enforce
authentication?

I searched around, it seems that this is not clearly documented yet;
the closest I found is:
http://www.riptano.com/docs/0.6.5/install/auth-config
http://cassandra-user-incubator-apache-org.3065146.n2.nabble.com/Authentication-td5285013.html#a5285013

I did start cassandra with the args mentioned above:

bin/cassandra -Dpasswd.properties=mypasswd.properties
-Daccess.properties=myaccess.properties -f

but then I can still simply use the command line interface to
connect localhost/9160
use myKeyspace

without any authentication passwd

Reply via email to