Mailing-List: contact commits-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cassandra.apache.org
Date: Tue, 18 Feb 2014 23:17:23 +0000 (UTC)
From: "sankalp kohli (JIRA)" <jira@apache.org>
To: commits@cassandra.apache.org
Message-ID: <JIRA.12693422.1391629459471.61287.1392765443850@arcas>
In-Reply-To: <JIRA.12693422.1391629459471@arcas>
References: <JIRA.12693422.1391629459471@arcas>
Subject: [jira] [Commented] (CASSANDRA-6660) Make node tool command take a
 password file
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


    [ https://issues.apache.org/jira/browse/CASSANDRA-6660?page=3Dcom.atlas=
sian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D=
13904777#comment-13904777 ]=20

sankalp kohli commented on CASSANDRA-6660:
------------------------------------------

I think you forgot to remove this line in your patch
System.out.println(password);

> Make node tool command take a password file
> -------------------------------------------
>
>                 Key: CASSANDRA-6660
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-6660
>             Project: Cassandra
>          Issue Type: Improvement
>            Reporter: Vishy Kasar
>            Assignee: Cl=C3=A9ment Lardeur
>            Priority: Trivial
>              Labels: nodetool
>             Fix For: 2.1
>
>         Attachments: trunk-6660-v1.patch, trunk-6660-v2.patch
>
>
> We are sending the jmx password in the clear to the node tool command in =
production. This is a security risk. Any one doing a 'ps' can see the clear=
 password. Can we change the node tool command to also take a password file=
 argument. This file will list the JMX user and passwords. Example below:
> cat /cassandra/run/10003004.jmxpasswd
> monitorRole abc
> controlRole def
> Based on the user name provided, node tool can pick up the right password=
.=20


--
This message was sent by Atlassian JIRA
(v6.1.5#6160)