Re: Question about security

2011-01-13 Thread Mark Phillips
It looks like the wiki is a little light on content relating to security/access control, and it's come up enough times on the list and in IRC to warrant its own page. So, I just started a stub for a page called "Deploying Riak" that will live under the Best Practices section of the wiki. As you'll

Re: Question about security

2011-01-12 Thread Jérôme Verstrynge
On 12/01/2011 7:17, Gary Smith wrote: If the answer to the above question is no, then how can one secure a Riak system properly? Put an apache (or whatever) server in front and proxy the requests accordingly and setup the security through the underlying web service. You -> [ apache -> riak ]

Re: Question about security

2011-01-12 Thread Alexander Sicular
... And redis and hadoop. More than a few of the newer nosql offerings do not bake security right into the cake. @siculars on twitter http://siculars.posterous.com Sent from my iPhone On Jan 12, 2011, at 13:17, Gary Smith wrote: Hi, Newbie question. I am trying to find documentation abou

RE: Question about security

2011-01-12 Thread Gary Smith
> Hi, > > Newbie question. I am trying to find documentation about Riak security. > I have seen > http://wiki.basho.com/Network-Security-and-Firewall-Configurations.html, > but I could not find much on access control. > > Is it possible to secure access to Riak nodes? Does it offer something > si

Re: Question about security

2011-01-12 Thread Alexander Sicular
The answer is no. Riak security is defined by you, the user, setting up appropriate network access to the riak service. This is done primarily by routers, firewalls and proxies. @siculars on twitter http://siculars.posterous.com Sent from my iPhone On Jan 12, 2011, at 12:34, Jérôme Verstry

Question about security

2011-01-12 Thread Jérôme Verstrynge
Hi, Newbie question. I am trying to find documentation about Riak security. I have seen http://wiki.basho.com/Network-Security-and-Firewall-Configurations.html, but I could not find much on access control. Is it possible to secure access to Riak nodes? Does it offer something similar to htt