[CASSANDRA-5401] Pluggable security feature to prevent node from joining a cluster and running destructive commands

• Type: Improvement
• Status: Resolved
• Priority: Low
• Resolution: Fixed
• Fix Version/s: 1.1.11, 1.2.4
• Component/s: Local/Config
• Labels: configuration security

Environment

Production

• Assignee: Aleksey Yeschenko
• Reporter: Ahmed Bashir

Authors

Aleksey Yeschenko

Reviewers

Brandon Williams

• Created: 29/Mar/13 01:06
• Updated: 16/Apr/19 09:32
• Resolved: 05/Apr/13 16:42

Description

It's possible for a node to join an existing cluster (with perhaps more stringent security restrictions i.e. not using AllowAllAuthentication) and issue destructive commands that affect the cluster at large (e.g. drop keyspace via cassandra-cli, etc).

This can be circumvented with a pluggable security module that could be used to implement basic node vetting/identification/etc.

Issue Links

• is duplicated by: CASSANDRA-5399 Offer pluggable security for inter-node communication