Mailing-List: contact commits-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cassandra.apache.org
Date: Wed, 5 Feb 2014 19:46:09 +0000 (UTC)
From: "Vishy Kasar (JIRA)" <jira@apache.org>
To: commits@cassandra.apache.org
Message-ID: <JIRA.12693422.1391629459471.43747.1391629569214@arcas>
In-Reply-To: <JIRA.12693422.1391629459471@arcas>
References: <JIRA.12693422.1391629459471@arcas>
Subject: [jira] [Created] (CASSANDRA-6660) Make node tool command take a
 password file
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Vishy Kasar created CASSANDRA-6660:
--------------------------------------

             Summary: Make node tool command take a password file
                 Key: CASSANDRA-6660
                 URL: https://issues.apache.org/jira/browse/CASSANDRA-6660
             Project: Cassandra
          Issue Type: Improvement
            Reporter: Vishy Kasar


We are sending the jmx password in the clear to the node tool command in production. This is a security risk. Any one doing a 'ps' can see the clear password. Can we change the node tool command to also take a password file argument. This file will list the JMX user and passwords. Example below:

cat /cassandra/run/10003004.jmxpasswd
monitorRole abc
controlRole def

Based on the user name provided, node tool can pick up the right password. 


--
This message was sent by Atlassian JIRA
(v6.1.5#6160)