Peter Halliday created CASSANDRA-6279:
-----------------------------------------

             Summary: command-line tool shouldn't require password
                 Key: CASSANDRA-6279
                 URL: https://issues.apache.org/jira/browse/CASSANDRA-6279
             Project: Cassandra
          Issue Type: Bug
            Reporter: Peter Halliday
            Priority: Minor


If you use nodetool and cassandra-cli, and have Thrift authentication, then you 
are required to pass in the password on the command-line.  This is a potential 
security issue.  For those that choose to do so, that's fine.  However, 
ideally, there would be a method of not doing that, which would prompt you to 
enter a password.  Understanding that no method is complete "secure", this 
would be certainly more so.



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Reply via email to