[
https://issues.apache.org/jira/browse/CASSANDRA-21546?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18102430#comment-18102430
]
Stefan Miklosovic commented on CASSANDRA-21546:
-----------------------------------------------
I did another round of review on [~anaik]'s patch and refactored what I seem
fit here (1) (last two commits) which might be cherry-picked (I rebased that
branch on top of current trunk though)
I have not focused on tests yet.
I would like to have a feedback on this comment in particular (2), that is what
I was trying to model in the second commit.
(1)
https://github.com/apache/cassandra/compare/trunk...smiklosovic:cassandra:CASSANDRA-21546?expand=1
(2) https://github.com/apache/cassandra/pull/4990/changes#r3728393783
> Support pluggable default role initialization (avoid hardcoded superuser
> password)
> ----------------------------------------------------------------------------------
>
> Key: CASSANDRA-21546
> URL: https://issues.apache.org/jira/browse/CASSANDRA-21546
> Project: Apache Cassandra
> Issue Type: New Feature
> Components: Legacy/Core
> Reporter: Aparna Naik
> Assignee: Aparna Naik
> Priority: Normal
> Fix For: 7.x
>
> Time Spent: 3.5h
> Remaining Estimate: 0h
>
> Cassandra's first-boot bootstrap hardcodes the creation of a cassandra
> superuser role with a default password (cassandra). Every new cluster starts
> with this guessable credential exposed until an operator manually rotates or
> drops it, and deployments that already use mutual TLS have no way to
> bootstrap a superuser identity without also creating this password-based one.
> This ticket will make the default role bootstrap pluggable via a new
> IDefaultRoleInitializer interface and default_role_initializer config option.
> The existing password-based behavior will be the default implementation for
> backward compatibility, and it will add a MutualTlsDefaultRoleInitializer
> that instead maps a client certificate identity to the superuser role, so no
> password credential needs to exist at all.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
