[CASSANDRA-9972] Make node tool command take a password file (2.0.x)

• Type: Improvement
• Status: Resolved
• Priority: Low
• Resolution: Won't Fix
• Labels: nodetool
• Assignee: Clément Lardeur Assign to me
• Reporter: Dmitrii Saprykin

Authors

Clément Lardeur

Reviewers

Sankalp Kohli

• Created: 04/Aug/15 00:34
• Updated: 16/Apr/19 09:31
• Resolved: 05/Jan/16 20:50

Description

We are sending the jmx password in the clear to the node tool command in production. This is a security risk. Any one doing a 'ps' can see the clear password. Can we change the node tool command to also take a password file argument. This file will list the JMX user and passwords. Example below:

cat /cassandra/run/10003004.jmxpasswd
monitorRole abc
controlRole def

Based on the user name provided, node tool can pick up the right password.

Issue Links

• is a clone of: CASSANDRA-6660 Make node tool command take a password file