Hi Cassandra Dev team,

I was using Cassandra's bulk loading tool on a simple auth based setup. I
found out that we need to pass *"-u and -pw" *parameters on Auth enabled
Casandra setup. If I use the command using these parameters then if someone
(any user with login access to Cassandra host machine) does *"ps -ef | grep
-v grep | grep -E 'sstableloader'" *on Cassandra host machine other then
Cassandra admin, then that user can see creds of the Cassandra user in
plain text.

I saw a similar issue while using the cqlsh and nodetool utility but there
I found *"--cqlshrc and -pwf" *options where we can pass ACL based file and
creds are not directly visible in ps command.

*I am not able to find any such option with the Sstableloader utility. Can
you suggest to me anyway by which I can pass Cassandra creds and those are
not visible over the ps command? I am looking for a solution on Cassandra
3.11.9 or 3.x in general.*

Regards
Radha Wadhera

Reply via email to