Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cassandra.apache.org
MIME-Version: 1.0
In-Reply-To: <CAPbVhuMsd-cNNcdQ_jv2ePcOL6LNRoLLmDoVuP3vufXoLs+rgw@mail.gmail.com>
References: <2C796272-AA33-4F3F-9FB6-647F1F8616A0@ancestry.com>
 <CACACo5TQb+i++COa=UQ_oq7nusvdfzKqvdL=0DO_uN2s1ccTdA@mail.gmail.com>
 <4D1F07EC-EFE5-49BF-B30F-B6365C86A639@ancestry.com> <CACACo5RmfDj1e380AHbcHJ6ZJeSvNep-9YTdwD3mTnHNxSgWaw@mail.gmail.com>
 <450A3663-C07D-4170-AC7C-0DFB6BBC6AC7@ancestry.com> <CAPbVhuMsd-cNNcdQ_jv2ePcOL6LNRoLLmDoVuP3vufXoLs+rgw@mail.gmail.com>
From: Nate McCall <nate@thelastpickle.com>
Date: Thu, 31 Aug 2017 15:49:38 +1200
Message-ID: <CAKmMYa_E01g7KzYDhdTvrznjkenEjpZ1RQH+puvj1FEwoECa=Q@mail.gmail.com>
Subject: Re: system_auth replication factor in Cassandra 2.1
To: Cassandra Users <user@cassandra.apache.org>
Content-Type: multipart/alternative; boundary="001a1148b49ca396f305580488aa"
archived-at: Thu, 31 Aug 2017 03:49:53 -0000

--001a1148b49ca396f305580488aa
Content-Type: text/plain; charset="UTF-8"

Regardless, if you are not modifying users frequently (with five you most
likely are not), make sure turn the permission cache waaaayyy up.

In 2.1 that is just: permissions_validity_in_ms (default is 2000 or 2
seconds). Feel free to set it to 1 day or some such. The corresponding
async update parameter (permissions_update_interval_in_ms) can be set to a
slightly smaller value. If you really need to, you can drop the cache via
the "invalidate" operation on the
"org.apache.cassandra.auth:type=PermissionsCache" mbean (on each node) to
revoke a user for example.

In later versions, you would have to do the same with:
- roles_validity_in_ms
- credentials_validity_in_ms
and their corresponding 'interval' parameters.

--001a1148b49ca396f305580488aa
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Regardless, if you are not modifying users frequently (wit=
h five you most likely are not), make sure turn the permission cache waaaay=
yy up.=C2=A0<div><br></div><div>In 2.1 that is just: permissions_validity_i=
n_ms (default is 2000 or 2 seconds). Feel free to set it to 1 day or some s=
uch. The corresponding async update parameter (permissions_update_interval_=
in_ms) can be set to a slightly smaller value. If you really need to, you c=
an drop the cache via the &quot;invalidate&quot; operation on the &quot;org=
.apache.cassandra.auth:type=3DPermissionsCache&quot; mbean (on each node) t=
o revoke a user for example.=C2=A0<div><br></div><div>In later versions, yo=
u would have to do the same with:</div><div>- roles_validity_in_ms<br></div=
><div>- credentials_validity_in_ms<br></div><div>and their corresponding &#=
39;interval&#39; parameters.=C2=A0</div></div></div>

--001a1148b49ca396f305580488aa--