[CASSANDRA-6660] Make node tool command take a password file

• Type: Improvement
• Status: Resolved
• Priority: Low
• Resolution: Fixed
• Fix Version/s: 2.1 beta1
• Labels: nodetool
• Assignee: Clément Lardeur
• Reporter: Vishy Kasar

Authors

Clément Lardeur

Reviewers

Sankalp Kohli

• Created: 05/Feb/14 19:44
• Updated: 16/Apr/19 09:31
• Resolved: 19/Feb/14 17:40

Description

We are sending the jmx password in the clear to the node tool command in production. This is a security risk. Any one doing a 'ps' can see the clear password. Can we change the node tool command to also take a password file argument. This file will list the JMX user and passwords. Example below:

cat /cassandra/run/10003004.jmxpasswd
monitorRole abc
controlRole def

Based on the user name provided, node tool can pick up the right password.

Issue Links

• is cloned by: CASSANDRA-9972 Make node tool command take a password file (2.0.x)