Hi,


actually Cassandra is not public  service like e-mail or social network. It's 
admin responsibility to create strong super password, and if there is front-end 
application allowing to users setting password such application can force 
password requirements.



Best regards, Vladimir Yudovin, 

Winguzone - Cloud Cassandra Hosting






---- On Fri, 23 Dec 2016 12:05:40 -0500 Prakash Chauhan 
<prakash.chau...@ericsson.com> wrote ----




Hello All, 

 

In Apache Cassandra , there are no strict password policies for creating a new 
user. 

 

A new user can be created with a password as simple as "abc" which is not at 
all recommended for production use. 

Moreover the same password can be used again and again. 

 

There should be a configurable password policy in Cassandra for creating new 
users. 

 

Any thoughts on this .... 

 

 

 

Regards, 

Prakash Chauhan. 






Reply via email to