git commit: Support pluggable internode authentication
Updated Branches: refs/heads/cassandra-1.1 d4744e178 - 4a010ed91 Support pluggable internode authentication patch by Aleksey Yeschenko; reviewed by Brandon Williams for CASSANDRA-5401 Project: http://git-wip-us.apache.org/repos/asf/cassandra/repo Commit: http://git-wip-us.apache.org/repos/asf/cassandra/commit/4a010ed9 Tree: http://git-wip-us.apache.org/repos/asf/cassandra/tree/4a010ed9 Diff: http://git-wip-us.apache.org/repos/asf/cassandra/diff/4a010ed9 Branch: refs/heads/cassandra-1.1 Commit: 4a010ed912711d7b8da16d248f32703ec001e4a2 Parents: d4744e1 Author: Aleksey Yeschenko alek...@apache.org Authored: Fri Apr 5 19:13:33 2013 +0300 Committer: Aleksey Yeschenko alek...@apache.org Committed: Fri Apr 5 19:13:33 2013 +0300 -- CHANGES.txt|1 + NEWS.txt | 13 conf/cassandra.yaml|4 + .../auth/AllowAllInternodeAuthenticator.java | 36 .../cassandra/auth/IInternodeAuthenticator.java| 44 +++ src/java/org/apache/cassandra/config/Config.java |1 + .../cassandra/config/DatabaseDescriptor.java | 14 + .../org/apache/cassandra/net/MessagingService.java | 10 +++- 8 files changed, 122 insertions(+), 1 deletions(-) -- http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/CHANGES.txt -- diff --git a/CHANGES.txt b/CHANGES.txt index d82bb74..fa407b5 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -12,6 +12,7 @@ * cli: Quote ks and cf names in schema output when needed (CASSANDRA-5052) * Fix bad default for min/max timestamp in SSTableMetadata (CASSANDRA-5372) * Fix cf name extraction from manifest in Directories.migrateFile() (CASSANDRA-5242) + * Support pluggable internode authentication (CASSANDRA-5401) 1.1.10 http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/NEWS.txt -- diff --git a/NEWS.txt b/NEWS.txt index b8954d4..f3511b7 100644 --- a/NEWS.txt +++ b/NEWS.txt @@ -8,6 +8,19 @@ upgrade, just in case you need to roll back to the previous version. (Cassandra version X + 1 will always be able to read data files created by version X, but the inverse is not necessarily the case.) +1.1.11 +== + +Upgrading +- +- Nothing specific to this release, but please see the previous instructions + if you are not upgrading from 1.1.10. + +Features + +- Pluggable internode authentication. + See `internode_authenticator` setting in cassandra.yaml. + 1.1.10 == http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/conf/cassandra.yaml -- diff --git a/conf/cassandra.yaml b/conf/cassandra.yaml index aa4db1c..37f41fb 100644 --- a/conf/cassandra.yaml +++ b/conf/cassandra.yaml @@ -275,6 +275,10 @@ listen_address: localhost # Leaving this blank will set it to the same value as listen_address # broadcast_address: 1.2.3.4 +# Internode authentication backend, implementing IInternodeAuthenticator; +# used to allow/disallow connections from peer nodes. +# internode_authenticator: org.apache.cassandra.auth.AllowAllInternodeAuthenticator + # The address to bind the Thrift RPC service to -- clients connect # here. Unlike ListenAddress above, you *can* specify 0.0.0.0 here if # you want Thrift to listen on all interfaces. http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java -- diff --git a/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java b/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java new file mode 100644 index 000..910ed85 --- /dev/null +++ b/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java @@ -0,0 +1,36 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * License); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * AS IS BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the
[1/2] git commit: Support pluggable internode authentication
Updated Branches: refs/heads/cassandra-1.2 1533f124c - 7039168e0 Support pluggable internode authentication patch by Aleksey Yeschenko; reviewed by Brandon Williams for CASSANDRA-5401 Project: http://git-wip-us.apache.org/repos/asf/cassandra/repo Commit: http://git-wip-us.apache.org/repos/asf/cassandra/commit/4a010ed9 Tree: http://git-wip-us.apache.org/repos/asf/cassandra/tree/4a010ed9 Diff: http://git-wip-us.apache.org/repos/asf/cassandra/diff/4a010ed9 Branch: refs/heads/cassandra-1.2 Commit: 4a010ed912711d7b8da16d248f32703ec001e4a2 Parents: d4744e1 Author: Aleksey Yeschenko alek...@apache.org Authored: Fri Apr 5 19:13:33 2013 +0300 Committer: Aleksey Yeschenko alek...@apache.org Committed: Fri Apr 5 19:13:33 2013 +0300 -- CHANGES.txt|1 + NEWS.txt | 13 conf/cassandra.yaml|4 + .../auth/AllowAllInternodeAuthenticator.java | 36 .../cassandra/auth/IInternodeAuthenticator.java| 44 +++ src/java/org/apache/cassandra/config/Config.java |1 + .../cassandra/config/DatabaseDescriptor.java | 14 + .../org/apache/cassandra/net/MessagingService.java | 10 +++- 8 files changed, 122 insertions(+), 1 deletions(-) -- http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/CHANGES.txt -- diff --git a/CHANGES.txt b/CHANGES.txt index d82bb74..fa407b5 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -12,6 +12,7 @@ * cli: Quote ks and cf names in schema output when needed (CASSANDRA-5052) * Fix bad default for min/max timestamp in SSTableMetadata (CASSANDRA-5372) * Fix cf name extraction from manifest in Directories.migrateFile() (CASSANDRA-5242) + * Support pluggable internode authentication (CASSANDRA-5401) 1.1.10 http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/NEWS.txt -- diff --git a/NEWS.txt b/NEWS.txt index b8954d4..f3511b7 100644 --- a/NEWS.txt +++ b/NEWS.txt @@ -8,6 +8,19 @@ upgrade, just in case you need to roll back to the previous version. (Cassandra version X + 1 will always be able to read data files created by version X, but the inverse is not necessarily the case.) +1.1.11 +== + +Upgrading +- +- Nothing specific to this release, but please see the previous instructions + if you are not upgrading from 1.1.10. + +Features + +- Pluggable internode authentication. + See `internode_authenticator` setting in cassandra.yaml. + 1.1.10 == http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/conf/cassandra.yaml -- diff --git a/conf/cassandra.yaml b/conf/cassandra.yaml index aa4db1c..37f41fb 100644 --- a/conf/cassandra.yaml +++ b/conf/cassandra.yaml @@ -275,6 +275,10 @@ listen_address: localhost # Leaving this blank will set it to the same value as listen_address # broadcast_address: 1.2.3.4 +# Internode authentication backend, implementing IInternodeAuthenticator; +# used to allow/disallow connections from peer nodes. +# internode_authenticator: org.apache.cassandra.auth.AllowAllInternodeAuthenticator + # The address to bind the Thrift RPC service to -- clients connect # here. Unlike ListenAddress above, you *can* specify 0.0.0.0 here if # you want Thrift to listen on all interfaces. http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java -- diff --git a/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java b/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java new file mode 100644 index 000..910ed85 --- /dev/null +++ b/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java @@ -0,0 +1,36 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * License); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * AS IS BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the
[1/3] git commit: Support pluggable internode authentication
Updated Branches: refs/heads/trunk 0f479eb0f - 3d0eb6231 Support pluggable internode authentication patch by Aleksey Yeschenko; reviewed by Brandon Williams for CASSANDRA-5401 Project: http://git-wip-us.apache.org/repos/asf/cassandra/repo Commit: http://git-wip-us.apache.org/repos/asf/cassandra/commit/4a010ed9 Tree: http://git-wip-us.apache.org/repos/asf/cassandra/tree/4a010ed9 Diff: http://git-wip-us.apache.org/repos/asf/cassandra/diff/4a010ed9 Branch: refs/heads/trunk Commit: 4a010ed912711d7b8da16d248f32703ec001e4a2 Parents: d4744e1 Author: Aleksey Yeschenko alek...@apache.org Authored: Fri Apr 5 19:13:33 2013 +0300 Committer: Aleksey Yeschenko alek...@apache.org Committed: Fri Apr 5 19:13:33 2013 +0300 -- CHANGES.txt|1 + NEWS.txt | 13 conf/cassandra.yaml|4 + .../auth/AllowAllInternodeAuthenticator.java | 36 .../cassandra/auth/IInternodeAuthenticator.java| 44 +++ src/java/org/apache/cassandra/config/Config.java |1 + .../cassandra/config/DatabaseDescriptor.java | 14 + .../org/apache/cassandra/net/MessagingService.java | 10 +++- 8 files changed, 122 insertions(+), 1 deletions(-) -- http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/CHANGES.txt -- diff --git a/CHANGES.txt b/CHANGES.txt index d82bb74..fa407b5 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -12,6 +12,7 @@ * cli: Quote ks and cf names in schema output when needed (CASSANDRA-5052) * Fix bad default for min/max timestamp in SSTableMetadata (CASSANDRA-5372) * Fix cf name extraction from manifest in Directories.migrateFile() (CASSANDRA-5242) + * Support pluggable internode authentication (CASSANDRA-5401) 1.1.10 http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/NEWS.txt -- diff --git a/NEWS.txt b/NEWS.txt index b8954d4..f3511b7 100644 --- a/NEWS.txt +++ b/NEWS.txt @@ -8,6 +8,19 @@ upgrade, just in case you need to roll back to the previous version. (Cassandra version X + 1 will always be able to read data files created by version X, but the inverse is not necessarily the case.) +1.1.11 +== + +Upgrading +- +- Nothing specific to this release, but please see the previous instructions + if you are not upgrading from 1.1.10. + +Features + +- Pluggable internode authentication. + See `internode_authenticator` setting in cassandra.yaml. + 1.1.10 == http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/conf/cassandra.yaml -- diff --git a/conf/cassandra.yaml b/conf/cassandra.yaml index aa4db1c..37f41fb 100644 --- a/conf/cassandra.yaml +++ b/conf/cassandra.yaml @@ -275,6 +275,10 @@ listen_address: localhost # Leaving this blank will set it to the same value as listen_address # broadcast_address: 1.2.3.4 +# Internode authentication backend, implementing IInternodeAuthenticator; +# used to allow/disallow connections from peer nodes. +# internode_authenticator: org.apache.cassandra.auth.AllowAllInternodeAuthenticator + # The address to bind the Thrift RPC service to -- clients connect # here. Unlike ListenAddress above, you *can* specify 0.0.0.0 here if # you want Thrift to listen on all interfaces. http://git-wip-us.apache.org/repos/asf/cassandra/blob/4a010ed9/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java -- diff --git a/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java b/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java new file mode 100644 index 000..910ed85 --- /dev/null +++ b/src/java/org/apache/cassandra/auth/AllowAllInternodeAuthenticator.java @@ -0,0 +1,36 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * License); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * AS IS BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + */ +
