[CASSANDRA-15522] Update defaults for the validity timeframe of roles, permissions, and credentials for 4.0

• Type: Improvement
• Status: Triage Needed
• Priority: Normal
• Resolution: Unresolved
• Component/s: Feature/Authorization
• Platform: All
• Assignee: Unassigned
• Reporter: Jeremy Hanna
• Created: 24/Jan/20 04:01
• Updated: 03/Feb/20 00:30

Description

It's been found that the defaults for roles_validity_in_ms, permissions_validity_in_ms, and credentials_validity_in_ms have been too low at 2000 ms or 2 seconds each.  As alexott put it in the dev list discussion about defaults:

I have seen multiple times when authentication was failing under the heavy load because queries to system tables were timing out - with these defaults people may still have the possibility to get updates to roles/credentials faster when specifying update_interval variants of these configurations.

The suggestion is to set it to 60000 (1 minute) or 120000 (2 minutes).