[
https://issues.apache.org/jira/browse/CASSANDRA-5310?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13595702#comment-13595702
]
jal commented on CASSANDRA-5310:
--------------------------------
CL=ONE is acceptable when modifying user privileges, because it is very rare
when we need to CREATE/DROP users or GRANT/REVOKE privileges to a user.
And with CL=ONE when checking the user privileges, the authentication continues
to work even in case of network split.
>From my point of view, is should also be acceptable to keep CL=QUORUM when
>updating the user in the system-auth keyspace, and to use CL=ONE when checking
>the user.
>From my point of view, it should be better to use CL=ALL when updating the
>user privileges, and CL=ONE when checking the user privileges so we should
>keep a strong consistency on all data in system_auth keyspace.
> New authentication module does not wok in multi datacenters in case of
> network outage
> -------------------------------------------------------------------------------------
>
> Key: CASSANDRA-5310
> URL: https://issues.apache.org/jira/browse/CASSANDRA-5310
> Project: Cassandra
> Issue Type: Bug
> Components: Core
> Affects Versions: 1.2.2
> Environment: Ubuntu 12.04
> Cluster of 16 nodes in 2 datacenters (8 nodes in each datacenter)
> Reporter: jal
> Assignee: Aleksey Yeschenko
> Attachments: auth_fix_consistency.patch
>
>
> With 1.2.2, I am using the new authentication backend PasswordAuthenticator
> with the authorizer CassandraAuthorizer
> In case of network outage, we are no more able to connect to Cassandra.
> Here is the error message we get when I want to connect through cqlsh:
> Traceback (most recent call last):
> File "./cqlsh", line 2262, in <module>
> main(*read_options(sys.argv[1:], os.environ))
> File "./cqlsh", line 2248, in main
> display_float_precision=options.float_precision)
> File "./cqlsh", line 483, in __init__
> cql_version=cqlver, transport=transport)
> File "./../lib/cql-internal-only-1.4.0.zip/cql-1.4.0/cql/connection.py", line
> 143, in connect
> File "./../lib/cql-internal-only-1.4.0.zip/cql-1.4.0/cql/connection.py",
> line 59, in __init__
> File "./../lib/cql-internal-only-1.4.0.zip/cql-1.4.0/cql/thrifteries.py",
> line 157, in establish_connection
> File
> "./../lib/cql-internal-only-1.4.0.zip/cql-1.4.0/cql/cassandra/Cassandra.py",
> line 455, in login
> File
> "./../lib/cql-internal-only-1.4.0.zip/cql-1.4.0/cql/cassandra/Cassandra.py",
> line 476, in recv_login
> cql.cassandra.ttypes.AuthenticationException:
> AuthenticationException(why='org.apache.cassandra.exceptions.UnavailableException:
> Cannot achieve consistency level QUORUM')
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
