CVE-2023-34340: Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials

2023-06-20 Thread Christopher Tubbs
Severity: critical Affected versions: - Apache Accumulo 2.1.0 before 2.1.1 Description: Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may

Re: Password File Config Property in 1.5 [SEC=UNCLASSIFIED]

2013-07-22 Thread Christopher Tubbs
That feature (ACCUMULO-489) had some fundamental flaws (ACCUMULO-826). One of the arguments made when rolling that back, was that the feature was not introduced in a minor release (it didn't appear in 1.4.0), so it wasn't part of the 1.4 contract. I apologize for the inconvenience this has caused.

Re: [VOTE] accumulo-1.4.2 RC2

2012-10-19 Thread Christopher Tubbs
I don't know that ACCUMULO-826 should be fixed before release, as I'm not sure there's a good fix without changing the API, and these issues may occur in several places in the MapReduce API. -- Christopher L Tubbs II http://gravatar.com/ctubbsii On Fri, Oct 19, 2012 at 3:41 PM, Eric Newton

Re: Accumulo Between Two Centers (DR - disaster recovery)

2012-09-26 Thread Christopher Tubbs
I believe Accumulo can work across data centers, if the underlying DFS span data centers. I also believe the latency tolerance is configurable, and matters for servers holding locks in Zookeeper and heartbeat messages to the Master. I'm not sure what the defaults for these are, though. On Wed,

Re: EXTERNAL: Re: Large files in Accumulo

2012-08-23 Thread Christopher Tubbs
You can still index a 1GB file... you just shouldn't try to push it all in in a single mutation, nor should you try to store it using a scheme that uses large keys. You can even still store the whole raw file in Accumulo, particularly if you chunk it up across multiple entries, but you may have

Re: egrep usage - 1.3.4

2012-08-06 Thread Christopher Tubbs
+1 for -g / --global option. --L On Mon, Aug 6, 2012 at 5:37 PM, David Medinets david.medin...@gmail.com wrote: +1 to add an option instead of using egrep2. On Mon, Aug 6, 2012 at 3:41 PM, Keith Turner ke...@deenlo.com wrote: Instead of a new command, we could add an option to the egrep

Re: Accumulo Caching for benchmarking

2012-08-03 Thread Christopher Tubbs
Steve- I would probably design the experiment to test different cluster sizes as completely independent. That means, taking the entire thing down and back up again (possibly even rebooting the boxes, and/or re-initializing the cluster at the new size). I'd also do several runs while it is up at a