Re: [VOTE CLOSED] Release Apache Cassandra 1.2.13 (Strike 2)

2013-12-17 Thread Michael Kjellman
Well. I feel stupid now :)

 On Dec 16, 2013, at 10:49 PM, Sylvain Lebresne sylv...@datastax.com wrote:
 
 On Tue, Dec 17, 2013 at 7:43 AM, Michael Kjellman
 mkjell...@barracuda.comwrote:
 
 I¹ve also seen behavior where prepared statements are lost during a
 rolling restart..haven¹t had a chance to debug/git bisect yet. Anyone else
 seen anything similar?
 
 I'd be somewhat surprised if someone hasn't. We don't persists prepared
 statements over
 node restart. it's supposed to be the client job to re-prepare statements
 when a node
 is restarted.
 
 --
 Sylvain
 
 
 
 On 12/16/13, 10:40 PM, Sylvain Lebresne sylv...@datastax.com wrote:
 
 Alright, this vote is thus close. I'll re-roll when we've made sure we
 fixed all the regressions so we'll see when that is.
 
 --
 Sylvain
 
 
 On Tue, Dec 17, 2013 at 1:01 AM, Brandon Williams dri...@gmail.com
 wrote:
 
 Or rather: https://issues.apache.org/jira/browse/CASSANDRA-6493
 
 I would still prefer a 24h vote after resolution though.
 
 
 On Mon, Dec 16, 2013 at 5:56 PM, Brandon Williams dri...@gmail.com
 wrote:
 
 Changing to -1 as
 https://issues.apache.org/jira/browse/CASSANDRA-6488seems to be a real
 problem.
 
 
 On Mon, Dec 16, 2013 at 12:12 PM, Brandon Williams dri...@gmail.com
 wrote:
 
 +1
 
 
 On Mon, Dec 16, 2013 at 3:38 AM, Sylvain Lebresne
 sylv...@datastax.com
 wrote:
 
 So now that CASSANDRA-6485 has been committed, I propose the
 following
 artifacts for release as 1.2.13.
 
 sha1: 4be9e6720d9f94a83aa42153c3e71ae1e557d2d9
 Git:
 http://git-wip-us.apache.org/repos/asf?p=cassandra.git;a=shortlog;h=refs/
 tags/1.2.13-tentative
 Artifacts:
 https://repository.apache.org/content/repositories/orgapachecassandra-050
 /org/apache/cassandra/apache-cassandra/1.2.13/
 Staging repository:
 https://repository.apache.org/content/repositories/orgapachecassandra-050
 /
 
 The artifacts as well as the debian package are also available here:
 http://people.apache.org/~slebresne/
 
 Since it is a re-roll, I propose an expedited vote so the vote will
 be
 open
 for 24 hours (but longer if needed).
 
 [1]: http://goo.gl/j4xUAK (CHANGES.txt)
 [2]: http://goo.gl/iu5Og9 (NEWS.txt)
 
 
 ===
 
 
 
 Find out how eSigning generates significant financial benefit.
 
 Read the Barracuda SignNow ROI whitepaper at
 https://signnow.com/l/business/esignature_roi
 

===

Find out how eSigning generates significant financial benefit.
Read the Barracuda SignNow ROI whitepaper at 
https://signnow.com/l/business/esignature_roi


Best avenue for reporting security issues

2013-12-17 Thread Ben Bromhead
Hi guys

We’ve come across a bug with potential security implications and in the spirit 
of responsible disclosure whats the best path for reporting it / submitting 
patches without making the issue public until a fixed version of Cassandra is 
released?

As a follow up I would propose that the Cassandra project should have 
secur...@cassandra.apache.org mailing address, where sensitive issues can be 
reported to the core dev team without it being made public.

Regards

Ben Bromhead
Instaclustr | www.instaclustr.com | @instaclustr | +61 415 936 359



Re: Best avenue for reporting security issues

2013-12-17 Thread Aleksey Yeschenko
Hi Ben,

Send it to me, I'll handle it.

Thanks


On Wed, Dec 18, 2013 at 2:30 AM, Ben Bromhead b...@instaclustr.com wrote:

 Hi guys

 We’ve come across a bug with potential security implications and in the
 spirit of responsible disclosure whats the best path for reporting it /
 submitting patches without making the issue public until a fixed version of
 Cassandra is released?

 As a follow up I would propose that the Cassandra project should have
 secur...@cassandra.apache.org mailing address, where sensitive issues can
 be reported to the core dev team without it being made public.

 Regards

 Ben Bromhead
 Instaclustr | www.instaclustr.com | @instaclustr | +61 415 936 359




Re: Best avenue for reporting security issues

2013-12-17 Thread Ben Bromhead
No worries, message sent

Ben Bromhead
Instaclustr | www.instaclustr.com | @instaclustr | +61 415 936 359

On 18 Dec 2013, at 10:35 am, Aleksey Yeschenko alek...@apache.org wrote:

 Hi Ben,
 
 Send it to me, I'll handle it.
 
 Thanks
 
 
 On Wed, Dec 18, 2013 at 2:30 AM, Ben Bromhead b...@instaclustr.com wrote:
 
 Hi guys
 
 We’ve come across a bug with potential security implications and in the
 spirit of responsible disclosure whats the best path for reporting it /
 submitting patches without making the issue public until a fixed version of
 Cassandra is released?
 
 As a follow up I would propose that the Cassandra project should have
 secur...@cassandra.apache.org mailing address, where sensitive issues can
 be reported to the core dev team without it being made public.
 
 Regards
 
 Ben Bromhead
 Instaclustr | www.instaclustr.com | @instaclustr | +61 415 936 359
 
 



Dimensional SUM, COUNT, DISTINCT in C* (replacing Acunu)

2013-12-17 Thread Brian O'Neill
We are seeking to replace Acunu in our technology stack / platform.  It is
the only component in our stack that is not open source.

In preparation, over the last few weeks I’ve migrated Virgil to CQL.   The
vision is that Virgil could receive a REST request to upsert/delete data
(hierarchical JSON to support collections).  Virgil would lookup the
dimensions/aggregations for that table, add the key to the pertinent
dimensional tables (e.g. DISTINCT), incorporate values into aggregations
(e.g. SUMs) and increment/decrement relevant counters (COUNT).  (using
additional CF’s)

This seems straight-forward, but appears to require a read-before-write.
 (e.g. read the current value of a SUM, incorporate the new value, then use
the lightweight transactions of C* 2.0 to conditionally update the value.)

Before I go down this path, I was wondering if anyone is designing/working
on the same, perhaps at a lower level?  (CQL?)

Is there any intent to support aggregations/filters (COUNT, SUM, DISTINCT,
etc) at the CQL level?  If so, is there a preliminary design?

I can see a lower-level approach, which would leverage the commit logs (and
mem/sstables) and perform the aggregation during read-operations (and
flush/compaction).

thoughts?  i'm open to all ideas.

-brian
-- 
Brian ONeill
Chief Architect, Health Market Science (http://healthmarketscience.com)
mobile:215.588.6024
blog: http://brianoneill.blogspot.com/
twitter: @boneill42