Re: Cassandra security

2009-08-21 Thread Mark McBride
That's not a bad idea. Doesn't end up being very fine grained, but should be sufficient. ---Mark On Fri, Aug 21, 2009 at 10:53 PM, Chris Goffinet wrote: > Sounds like your asking if Cassandra has support for a software ACL.  No, > Cassandra does not have that. I personally think that should b

Re: Cassandra security

2009-08-21 Thread Chris Goffinet
Sounds like your asking if Cassandra has support for a software ACL. No, Cassandra does not have that. I personally think that should be at the hardware level anyway, why waste the cycles. Secure your network firewalls internally to isolate your appliance. If anything, you could ship a sof

Re: Cassandra security

2009-08-21 Thread Mark McBride
I understand that part. But how do you prevent people starting a rogue node and adding it to the system? As I understand it now, anybody can bring up a node, point it at one of the seeds and have it take part in the cluster. Am I mistaken there? ---Mark On Fri, Aug 21, 2009 at 10:42 PM, Ch

Re: Cassandra security

2009-08-21 Thread Chris Goffinet
Thrift is just a cross-platform interface. Using the internal api does not mitigate having Cassandra find other nodes. -Chris On Aug 21, 2009, at 10:39 PM, Mark McBride wrote: There's still the question of inter-node communication though. One of the attractive things to us is the ability to

Re: Cassandra security

2009-08-21 Thread Mark McBride
There's still the question of inter-node communication though. One of the attractive things to us is the ability to power on another virtual appliance and have it auto-discover the other Cassandra nodes. Is this just something outside the scope of the current design? ---Mark On Fri, Aug 21,

Re: Cassandra security

2009-08-21 Thread Jonathan Ellis
if your product is jvm based, just use the internal api and don't stzrt the thrift listeners at all. On 8/21/09, Mark McBride wrote: > I'm looking at the potential of embedding Cassandra in one of our > products. This ships as one or more virtual appliances that runs at a > customer's site, and

Cassandra security

2009-08-21 Thread Mark McBride
I'm looking at the potential of embedding Cassandra in one of our products. This ships as one or more virtual appliances that runs at a customer's site, and security is always an issue. This looks like mostly a Thrift issue... but I was wondering if anybody on this list had any thoughts about how

Re: cassandra in unit tests

2009-08-21 Thread Jonathan Ellis
cassandra is multithreaded by design. there's no way to have a running server in a single thread. On Fri, Aug 21, 2009 at 1:31 AM, Leen Toelen wrote: > Hi, > does anyone have experience running a cassandra database using spring and/or > in unit tests (single node, single thread, no remoting)? I w

cassandra in unit tests

2009-08-21 Thread Leen Toelen
Hi, does anyone have experience running a cassandra database using spring and/or in unit tests (single node, single thread, no remoting)? I would like to start a cassandra database, assign a directory to it, and run tests in my own dao objects with the cassandra backend. Regards, Leen