[
https://issues.apache.org/jira/browse/CASSANDRA-20368?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Tiago L. Alves updated CASSANDRA-20368:
---------------------------------------
Change Category: Operability
Complexity: Low Hanging Fruit
Component/s: Feature/Authorization
Assignee: Tiago L. Alves
Status: Open (was: Triage Needed)
> Improves error messages when initializing auth* classes
> -------------------------------------------------------
>
> Key: CASSANDRA-20368
> URL: https://issues.apache.org/jira/browse/CASSANDRA-20368
> Project: Apache Cassandra
> Issue Type: Improvement
> Components: Feature/Authorization
> Reporter: Tiago L. Alves
> Assignee: Tiago L. Alves
> Priority: Normal
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Failures when setting up auth/authz in Cassandra show be more made more clear.
> Issues noticed are:
> * When configuring `PasswordAuthenticator` with a custom IRoleManager
> implementation, the message will report "CassandraRoleManager must be used
> with PasswordAuthenticator". "CassandraRoleManager" can be used with any
> `IAuthenticator` implementation. The issue here is that
> `PasswordAuthenticator` requires using `CassandraRoleManager` because it has
> an implicit dependency on how passwords are created by it.
> * If we're configuring `MutualTlsWithPasswordFallbackAuthenticator` with
> another `IRoleManager` implementation we'll see a message that we're using
> `PasswordAuthenticator` which is incorrect.
> * When enabling authorization without enabling authentication, error message
> just says that "[IAuhtenticator] can't be used with [IAuthorizer]" without
> explaining why
> * Exceptions thrown when instantiating auth* classes are swallowed
> preventing users to understand what the issue was.
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
