Return-Path: Delivered-To: apmail-incubator-cassandra-user-archive@minotaur.apache.org Received: (qmail 6328 invoked from network); 2 Dec 2009 20:35:15 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 2 Dec 2009 20:35:15 -0000 Received: (qmail 97368 invoked by uid 500); 2 Dec 2009 20:35:15 -0000 Delivered-To: apmail-incubator-cassandra-user-archive@incubator.apache.org Received: (qmail 97331 invoked by uid 500); 2 Dec 2009 20:35:15 -0000 Mailing-List: contact cassandra-user-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: cassandra-user@incubator.apache.org Delivered-To: mailing list cassandra-user@incubator.apache.org Received: (qmail 97322 invoked by uid 99); 2 Dec 2009 20:35:15 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Dec 2009 20:35:15 +0000 X-ASF-Spam-Status: No, hits=-2.6 required=5.0 tests=AWL,BAYES_00 X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: local policy) Received: from [67.192.241.151] (HELO smtp151.dfw.emailsrvr.com) (67.192.241.151) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Dec 2009 20:35:12 +0000 Received: from relay15.relay.dfw.mlsrvr.com (localhost [127.0.0.1]) by relay15.relay.dfw.mlsrvr.com (SMTP Server) with ESMTP id 62D1D30B079C for ; Wed, 2 Dec 2009 15:34:51 -0500 (EST) Received: by relay15.relay.dfw.mlsrvr.com (Authenticated sender: eevans-AT-racklabs.com) with ESMTPSA id 56CAE30B0790 for ; Wed, 2 Dec 2009 15:34:51 -0500 (EST) Subject: Re: Cassandra access control From: Eric Evans To: cassandra-user@incubator.apache.org In-Reply-To: <87zl61i0kn.fsf@lifelogs.com> References: <87eio6p7pb.fsf@lifelogs.com> <87fx8jptkn.fsf@lifelogs.com> <874oozpqcw.fsf@lifelogs.com> <87einfr6a8.fsf@lifelogs.com> <1259699027.19220.37.camel@achilles> <87fx7ul6id.fsf@lifelogs.com> <1259708330.19220.59.camel@achilles> <87638pl96u.fsf@lifelogs.com> <87ljhljhv2.fsf@lifelogs.com> <1259784893.10676.32.camel@achilles> <87zl61i0kn.fsf@lifelogs.com> Content-Type: text/plain; charset="UTF-8" Date: Wed, 02 Dec 2009 14:35:09 -0600 Message-ID: <1259786109.10676.35.camel@achilles> Mime-Version: 1.0 X-Mailer: Evolution 2.28.1 Content-Transfer-Encoding: 7bit On Wed, 2009-12-02 at 14:27 -0600, Ted Zlatanov wrote: > On Wed, 02 Dec 2009 14:14:53 -0600 Eric Evans wrote: > > EE> Did you maybe mean...? AuthenticationRequest required for the > EE> method (has to be), but the map is optional? > > Either way will work. With your suggestion and allowing for auth > backends to modify the authentication request: Let's not do that; as Robin pointed out... "...there's no way to ensure immediate consistency of tokens across all nodes, it's probably not worth the effort of making Cassandra "token aware", since an application would have to provide fall-back logic to authenticate with credentials, if the token fails. So, tokens would probably just add complexity without much benefit." -- Eric Evans eevans@rackspace.com