Re: Configurable password policy in Cassandra...

2016-12-23 Thread Aleksey Yeschenko
You can write a patch for one, or create a custom authenticator implementation that would enforce this. They are pluggable after all, just like authorizer is. --  AY On 23 December 2016 at 20:06:19, Prakash Chauhan (prakash.chau...@ericsson.com) wrote: Hello All, In Apache Cassandra , ther

Re: Configurable password policy in Cassandra...

2016-12-23 Thread Andy Cobley
I’d like to take issue with this sentiment. Whilst I can see the point, it is exactly this sort of attitude that leads to sites getting hacked. You’re argument goes, if a site using Cassandra loses 1million passwords it’s that sites admin that is to blame. However, infosec aware developers w

Re: Configurable password policy in Cassandra...

2016-12-23 Thread Vladimir Yudovin
Hi, actually Cassandra is not public service like e-mail or social network. It's admin responsibility to create strong super password, and if there is front-end application allowing to users setting password such application can force password requirements. Best regards, Vladimir Yudovin,