Re: [VOTE] Website

2009-11-12 Thread David MARTIN
+1 ! On Thu, Nov 12, 2009 at 11:46 AM, Rauan Maemirov ra...@maemirov.com wrote: +1 great work. 2009/11/12 Richard grossman richie...@gmail.com: +1 Very nice design On Thu, Nov 12, 2009 at 8:26 AM, Vijay vijay2...@gmail.com wrote: +1 great... Regards, /VJ On Wed,

Cassandra access control (was: bandwidth limiting Cassandra's replication and access control)

2009-11-12 Thread Ted Zlatanov
On Wed, 11 Nov 2009 16:14:09 -0800 Anthony Molinaro antho...@alumni.caltech.edu wrote: AM How will authentication work with non-java clients? I don't think thrift AM itself has authentication built in, and it sounds like a java library is AM being proposed for the guts. Will it still be

Re: bandwidth limiting Cassandra's replication and access control

2009-11-12 Thread Ted Zlatanov
On Thu, 12 Nov 2009 12:40:05 +1100 Ian Holsman i...@holsman.net wrote: IH most places i've seen don't use DB auth anywhere. there is a common IH login, stored in a property file, sometimes stored in a internally- IH world-readable SVN repo. In my current industry (financials) this is not

Re: Cassandra access control (was: bandwidth limiting Cassandra's replication and access control)

2009-11-12 Thread Jonathan Ellis
2009/11/12 Ted Zlatanov t...@lifelogs.com: On Wed, 11 Nov 2009 16:14:09 -0800 Anthony Molinaro antho...@alumni.caltech.edu wrote: AM How will authentication work with non-java clients?  I don't think thrift AM itself has authentication built in, and it sounds like a java library is AM being

RE: Re: bandwidth limiting Cassandra's replication and access control

2009-11-12 Thread Coe, Robin
I'm not sure JAAS is the way to go when implementing a performant authentication/authorization service. This is what threw me off in the first place. JAAS is a framework that allows for sequential authentication using multiple login modules. As each login module authenticates, it passes

Re: bandwidth limiting Cassandra's replication and access control

2009-11-12 Thread Ted Zlatanov
On Wed, 11 Nov 2009 10:14:58 -0600 Eric Evans eev...@rackspace.com wrote: EE On Tue, 2009-11-10 at 16:25 -0600, Ted Zlatanov wrote: (BTW, I use Eclipse for Java development, is there a way to run the Ant tasks automatically to rebuild the generated source if necessary? It works fine

Cassandra access control (was: bandwidth limiting Cassandra's replication and access control)

2009-11-12 Thread Ted Zlatanov
On Wed, 11 Nov 2009 14:59:04 -0800 Coe, Robin robin@bluecoat.com wrote: CR Java's policy manager controls access to environment variables and CR code execution. All a JAAS service provides is a hook to pass a CR user's principal to the security manager. So, the only CR authorization you

Re: Cassandra access control (was: bandwidth limiting Cassandra's replication and access control)

2009-11-12 Thread Jonathan Mischo
On Nov 12, 2009, at 9:12 AM, Jonathan Ellis wrote: 2009/11/12 Ted Zlatanov t...@lifelogs.com: On Wed, 11 Nov 2009 16:14:09 -0800 Anthony Molinaro antho...@alumni.caltech.edu wrote: The client will login with a MapString,String of login tokens and get an auth token (probably a String

Re: Cassandra access control

2009-11-12 Thread Jonathan Mischo
On Nov 12, 2009, at 10:06 AM, Jonathan Ellis wrote: 2009/11/12 Ted Zlatanov t...@lifelogs.com: Hmm, I thought we were going to limit access to a single keyspace upon login. You want to keep allowing multiple keyspaces? That would leave the existing API intact (only adding a login

Re: Cassandra access control

2009-11-12 Thread Thorsten von Eicken
+1 It's not a lot of complexity and it doesn't throw sticks into frameworks that may model a conventional table as a keyspace. Thorsten Jonathan Mischo wrote: Conditional +1 here: +1 IF the Keyspace parameter is optional in 0.6 forward, but not completely eliminated AND IF login() has

Re: Cassandra access control

2009-11-12 Thread Jonathan Mischo
Conditional +1 here: +1 IF the Keyspace parameter is optional in 0.6 forward, but not completely eliminated AND IF login() has an optional param for keyspace AND IF the backend stores a list of keyspaces you're authorized to access once you're authenticated if you don't specify a single

Re: Cassandra access control

2009-11-12 Thread Jonathan Ellis
+1 2009/11/12 Ted Zlatanov t...@lifelogs.com: On Thu, 12 Nov 2009 10:06:02 -0600 Jonathan Ellis jbel...@gmail.com wrote: JE 2009/11/12 Ted Zlatanov t...@lifelogs.com: JE The default should definitely be, don't break people who don't need JE the new feature more than necessary.  So the

Re: Cassandra access control

2009-11-12 Thread Ted Zlatanov
On Thu, 12 Nov 2009 10:23:21 -0600 Jonathan Mischo jmis...@quagility.com wrote: JM The problem I see with this is that you can't have a single connection JM accessing multiple keyspaces at once. I can think of some cases where JM having a single connection access and differentiate between two

Re: Cassandra access control

2009-11-12 Thread Jonathan Ellis
frameworks that do that should be shot. On Thu, Nov 12, 2009 at 10:48 AM, Thorsten von Eicken t...@rightscale.com wrote: +1 It's not a lot of complexity and it doesn't throw sticks into frameworks that may model a conventional table as a keyspace.   Thorsten Jonathan Mischo wrote:

Re: Cassandra access control

2009-11-12 Thread Ted Zlatanov
On Thu, 12 Nov 2009 10:49:59 -0600 Jonathan Ellis jbel...@gmail.com wrote: JE On Thu, Nov 12, 2009 at 10:42 AM, Jonathan Mischo jmis...@quagility.com wrote: Let's keep it simple.  Forcing multiple connections from a purely hypothetical use case is a no-brainer tradeoff.  Connections are not

RE: Re: Cassandra access control

2009-11-12 Thread Coe, Robin
I would definitely like to see a simple file-space approach to begin with and then would investigate the need for LDAP binding. For that, I would start by using a CLI approach to LDAP searching and binding and use that as the performance test case against JNDI. Here are some references:

Re: Cassandra access control

2009-11-12 Thread Jonathan Ellis
works for me. 2009/11/12 Ted Zlatanov t...@lifelogs.com: On Thu, 12 Nov 2009 10:49:59 -0600 Jonathan Ellis jbel...@gmail.com wrote: JE On Thu, Nov 12, 2009 at 10:42 AM, Jonathan Mischo jmis...@quagility.com wrote: Let's keep it simple.  Forcing multiple connections from a purely

Re: bandwidth limiting Cassandra's replication and access control

2009-11-12 Thread Eric Evans
On Thu, 2009-11-12 at 09:36 -0600, Ted Zlatanov wrote: EE Yes. Go to Project-Properties-Builders, click New, and add an Ant EE Builder (the defaults should be OK). You'll probably want to disable EE Java Builder while you're there. Thanks. I actually like the Java builder too (I have

Re: Cassandra access control

2009-11-12 Thread Ted Zlatanov
On Thu, 12 Nov 2009 10:59:52 -0600 Ted Zlatanov t...@lifelogs.com wrote: TZ On Thu, 12 Nov 2009 10:49:59 -0600 Jonathan Ellis jbel...@gmail.com wrote: JE On Thu, Nov 12, 2009 at 10:42 AM, Jonathan Mischo jmis...@quagility.com wrote: Let's keep it simple.  Forcing multiple connections from a

Re: [VOTE] Website

2009-11-12 Thread Eric Evans
On Wed, 2009-11-11 at 16:10 -0600, Eric Evans wrote: The current website is quite ugly, and I don't know about you, but I'm itching to put the new project logo to use, so I'd like to propose publishing http://cassandra.deadcafe.org (to http://incubator.apache.org/cassandra). The new site is

RE: Meetup?

2009-11-12 Thread Nick Lothian
Where in Australia are you from? (Adelaide here) I might be interested in one down here. From: Chris Were [mailto:chris.w...@gmail.com] Sent: Friday, 13 November 2009 9:09 AM To: cassandra-user@incubator.apache.org Subject: OT: Meetup? Hi, I'm from Australia, but currently in SF for the next 2

RE: Re: Cassandra access control

2009-11-12 Thread Coe, Robin
Ted, Why pass a map of credentials? Why not follow the standard approach of opening the connection with the credentials, as in tr.open( uid, passwd )? For now, that can be an overloaded method call that would leave the existing API as-is. Robin. -Original Message- From: news on

Re: Meetup?

2009-11-12 Thread Ian Holsman
I'm in Melbourne, and frequently in DC and NY as well. On Nov 13, 2009, at 11:18 AM, Nick Lothian wrote: Where in Australia are you from? (Adelaide here) I might be interested in one down here. From: Chris Were [mailto:chris.w...@gmail.com] Sent: Friday, 13 November 2009 9:09 AM To:

Re: Leaked FDs

2009-11-12 Thread Jonathan Ellis
This is fixed in trunk and the 0.4 branch but did not make 0.4.2. On Thu, Nov 12, 2009 at 6:28 PM, elsif elsif.t...@gmail.com wrote: Hello.  I am testing out Cassandra and ran out of file descriptors while attempting to scan through the key space.  I have ~180 million unique keys, 10 nodes,

RE: Leaked FDs

2009-11-12 Thread Freeman, Tim
The symptoms are consistent with https://issues.apache.org/jira/browse/CASSANDRA-533. I agree with Jonathan that the fix for that is in Trunk and not in 0.4.2. There's a code fix given in the bug, if you want to hack source and recompile. Tim Freeman Email: tim.free...@hp.com Desk in Palo

RE: Meetup?

2009-11-12 Thread Nick Lothian
We need NoSQL South. -Original Message- From: Ian Holsman [mailto:i...@holsman.net] Sent: Friday, 13 November 2009 10:56 AM To: cassandra-user@incubator.apache.org Subject: Re: Meetup? I'm in Melbourne, and frequently in DC and NY as well. On Nov 13, 2009, at 11:18 AM, Nick