[
https://issues.apache.org/jira/browse/CASSANDRA-20368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17933956#comment-17933956
]
Tiago L. Alves commented on CASSANDRA-20368:
--------------------------------------------
I've triggered [http://35.228.140.106:8080/job/cassandra/175/] for final
validation.
> Improves error messages when initializing auth* classes
> -------------------------------------------------------
>
> Key: CASSANDRA-20368
> URL: https://issues.apache.org/jira/browse/CASSANDRA-20368
> Project: Apache Cassandra
> Issue Type: Improvement
> Components: Feature/Authorization
> Reporter: Tiago L. Alves
> Assignee: Tiago L. Alves
> Priority: Normal
> Fix For: 5.0.x, 5.x
>
> Attachments: latest_jdk11_x86_64.zip
>
> Time Spent: 4h 50m
> Remaining Estimate: 0h
>
> Failures when setting up auth/authz in Cassandra show be more made more clear.
> Issues noticed are:
> * When configuring `PasswordAuthenticator` with a custom IRoleManager
> implementation, the message will report "CassandraRoleManager must be used
> with PasswordAuthenticator". "CassandraRoleManager" can be used with any
> `IAuthenticator` implementation. The issue here is that
> `PasswordAuthenticator` requires using `CassandraRoleManager` because it has
> an implicit dependency on how passwords are created by it.
> * If we're configuring `MutualTlsWithPasswordFallbackAuthenticator` with
> another `IRoleManager` implementation we'll see a message that we're using
> `PasswordAuthenticator` which is incorrect.
> * When enabling authorization without enabling authentication, error message
> just says that "[IAuhtenticator] can't be used with [IAuthorizer]" without
> explaining why
> * Exceptions thrown when instantiating auth* classes are swallowed
> preventing users to understand what the issue was.
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
