Uploaded image for project: 'Cassandra'
  1. Cassandra
  2. CASSANDRA-5401

Pluggable security feature to prevent node from joining a cluster and running destructive commands

Agile BoardAttach filesAttach ScreenshotBulk Copy AttachmentsBulk Move AttachmentsVotersWatch issueWatchersCreate sub-taskConvert to sub-taskMoveLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    Description

      It's possible for a node to join an existing cluster (with perhaps more stringent security restrictions i.e. not using AllowAllAuthentication) and issue destructive commands that affect the cluster at large (e.g. drop keyspace via cassandra-cli, etc).

      This can be circumvented with a pluggable security module that could be used to implement basic node vetting/identification/etc.

      Attachments

        Issue Links

        is duplicated by

        Improvement - An improvement or enhancement to an existing feature or task. CASSANDRA-5399 Offer pluggable security for inter-node communication

        • Normal -
        • Resolved

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            aleksey Aleksey Yeschenko Assign to me
            abashir Ahmed Bashir
            Aleksey Yeschenko
            Brandon Williams
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment