[CASSANDRA-6233] Authentication is broken for the protocol v1 on C* 2.0

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 2.0.2
• Severity: Normal
• Since Version: 2.0.1
• Assignee: Sylvain Lebresne
• Reporter: Sylvain Lebresne

Authors

Sylvain Lebresne

Reviewers

Aleksey Yeschenko

• Created: 23/Oct/13 13:56
• Updated: 16/Apr/19 09:32
• Resolved: 28/Oct/13 09:31

Description

CASSANDRA-5664 simplified the decoding method of CredentialsMessage by using CBUtil.readStringMap (instead of duplicating the code). Unfortunately, that latter method turns his keys to uppercase (to provide some form of case insensitivity for keys), and in the case of CredentialsMessage this breaks PasswordAuthenticator that expect lowercased keys (besides, it's a bad idea to mess up with the case of the credentials map in general).

Making CBUtil.readStringMap uppercase keys was probably a bad idea in the first place (as nothing in the method name imply this), so attaching patch that remove this (and uppercase keys specifically in StartupMessage where that was done on purpose).

Issue Links

• is duplicated by: CASSANDRA-6203 Authentication error on host localhost/127.0.0.1: Required key 'username' is missing
• relates to: CASSANDRA-6243 Create more dtests for authenticated logins