[ 
https://issues.apache.org/jira/browse/CASSANDRA-16983?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17420627#comment-17420627
 ] 

Bowen Song edited comment on CASSANDRA-16983 at 9/27/21, 9:49 AM:
------------------------------------------------------------------

Hi [~stefan.miklosovic], I've just tried that, and I don't think it's working 
either. 

I have followed the README and installed the native dependencies and Python 
dependencies, and the command I used to run the tests is "pytest 
--cassandra-dir=$HOME/cassandra_fork". I first tried to use `\~` as the 
document suggested, but that did not work for me, the test failed with "E   
FileNotFoundError: [Errno 2] No such file or directory: 
'\~/cassandra_fork/build.xml'" immediately. The test runs after replacing `\~` 
with `$HOME`, but most of them are failing. The output at the end is "724 
failed, 99 passed, 240 skipped, 4088 deselected, 2 xfailed, 162 error in 725.86 
seconds". I can only see hundreds lines of these errors repeating:


{noformat}
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1037>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/cluster.py:524>,
 <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:829>, 
<TracebackEntry /usr/lib/python3.9/os.py:679>]
test_thread_count_repair failed and was not selected for rerun.
        <class 'KeyError'>
        'JAVA_HOME'
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1080>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/cluster.py:524>,
 <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:829>, 
<TracebackEntry /usr/lib/python3.9/os.py:679>]
test_multiple_concurrent_repairs failed and was not selected for rerun.
        <class 'KeyError'>
        'JAVA_HOME'
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1121>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/cluster.py:524>,
 <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:829>, 
<TracebackEntry /usr/lib/python3.9/os.py:679>]
test_wide_row_repair failed and was not selected for rerun.
        <class 'KeyError'>
        'JAVA_HOME'
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1148>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/cluster.py:524>,
 <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:829>, 
<TracebackEntry /usr/lib/python3.9/os.py:679>]
test_dead_sync_initiator failed and was not selected for rerun.
        <class 'IndexError'>
        list index out of range
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1203>, <TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1261>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1582>, 
<TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1850>]
test_dead_sync_participant failed and was not selected for rerun.
        <class 'IndexError'>
        list index out of range
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1210>, <TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1261>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1582>, 
<TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1850>]
test_failure_during_validation failed and was not selected for rerun.
        <class 'IndexError'>
        list index out of range
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1224>, <TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1261>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1582>, 
<TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1850>]
{noformat}

Any tips on how to run this correctly?


was (Author: bowen song):
Hi [~stefan.miklosovic], I've just tried that, and I don't think it's working 
either. 

I have followed the README and installed the native dependencies and Python 
dependencies, and the command I used to run the tests is "pytest 
--cassandra-dir=$HOME/cassandra_fork". I first tried to use `~` as the document 
suggested, but that did not work for me, the test failed with "E   
FileNotFoundError: [Errno 2] No such file or directory: 
'~/cassandra_fork/build.xml'" immediately. The test runs after replacing `~` 
with `$HOME`, but most of them are failing. The output at the end is "724 
failed, 99 passed, 240 skipped, 4088 deselected, 2 xfailed, 162 error in 725.86 
seconds". I can only see hundreds lines of these errors repeating:


{noformat}
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1037>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/cluster.py:524>,
 <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:829>, 
<TracebackEntry /usr/lib/python3.9/os.py:679>]
test_thread_count_repair failed and was not selected for rerun.
        <class 'KeyError'>
        'JAVA_HOME'
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1080>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/cluster.py:524>,
 <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:829>, 
<TracebackEntry /usr/lib/python3.9/os.py:679>]
test_multiple_concurrent_repairs failed and was not selected for rerun.
        <class 'KeyError'>
        'JAVA_HOME'
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1121>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/cluster.py:524>,
 <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:829>, 
<TracebackEntry /usr/lib/python3.9/os.py:679>]
test_wide_row_repair failed and was not selected for rerun.
        <class 'KeyError'>
        'JAVA_HOME'
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1148>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/cluster.py:524>,
 <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:829>, 
<TracebackEntry /usr/lib/python3.9/os.py:679>]
test_dead_sync_initiator failed and was not selected for rerun.
        <class 'IndexError'>
        list index out of range
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1203>, <TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1261>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1582>, 
<TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1850>]
test_dead_sync_participant failed and was not selected for rerun.
        <class 'IndexError'>
        list index out of range
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1210>, <TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1261>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1582>, 
<TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1850>]
test_failure_during_validation failed and was not selected for rerun.
        <class 'IndexError'>
        list index out of range
        [<TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1224>, <TracebackEntry 
/home/user/cassandra-dtest/repair_tests/repair_test.py:1261>, <TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1582>, 
<TracebackEntry 
/home/user/.virtualenvs/dtest/lib/python3.9/site-packages/ccmlib/node.py:1850>]
{noformat}

Any tips on how to run this correctly?

> Separating CQLSH credentials from the cqlshrc file
> --------------------------------------------------
>
>                 Key: CASSANDRA-16983
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-16983
>             Project: Cassandra
>          Issue Type: Improvement
>          Components: Tool/cqlsh
>            Reporter: Bowen Song
>            Assignee: Bowen Song
>            Priority: Normal
>              Labels: lhf
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Currently, the CQLSH tool accepts credentials (username & password) from the 
> following 3 places:
> 1. the command line parameter "-p"
> 2. the cqlshrc file
> 3. prompt the user
> This is not ideal.
> Credentials in the command line is a security risk, because it could be see 
> by other users on a shared system.
> The cqlshrc file is better, but still not good enough. Because the cqlshrc 
> file is a config file,  it's often acceptable to have it as a world readable 
> file, and share it with other users. It also prevents user from having 
> multiple sets of credentials, either for the same Cassandra cluster or 
> different clusters.
> To improve the security of CQLSH and make it secure by design, I purpose the 
> following changes:
> * Warn the user if a password is giving in the command line, and recommend 
> them to use a credential file instead
> * Warn the user if credentials are present in the cqlshrc file and the 
> cqlshrc file is not secure (e.g.: world readable or owned by a different user)
> * Deprecate credentials in the cqlshrc, and recommend the user to move them 
> to a separate credential file. The aim is to not break anything at the 
> moment, but eventually stop accepting credentials from the cqlshrc file.
> * Reject the credentials file if it's not secure, and tell the user how to 
> secure it. Optionally, prompt the user for password if it's an interactive 
> session. (Think how does OpenSSH handle insecure credential files)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to