CVE-2023-34340: Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials

2023-06-20 Thread Christopher Tubbs
Severity: critical Affected versions: - Apache Accumulo 2.1.0 before 2.1.1 Description: Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may

Re: Keep Tables on Shutdown

2012-07-27 Thread Christopher Tubbs
Doesn't HDFS use /tmp by default to store its data? You may want to update your ${HADOOP_HOME}/conf/hdfs-site.xml file to specify a different location. --Christopher On Fri, Jul 27, 2012 at 10:28 AM, Jonathan Hsu wrote: > Hey all, > > I have a problem with my Accumulo tables deleting upon shutd

Re: Accumulo Caching for benchmarking

2012-08-03 Thread Christopher Tubbs
Steve- I would probably design the experiment to test different cluster sizes as completely independent. That means, taking the entire thing down and back up again (possibly even rebooting the boxes, and/or re-initializing the cluster at the new size). I'd also do several runs while it is up at a

Re: egrep usage - 1.3.4

2012-08-06 Thread Christopher Tubbs
+1 for "-g" / "--global" option. --L On Mon, Aug 6, 2012 at 5:37 PM, David Medinets wrote: > +1 to add an option instead of using egrep2. > > On Mon, Aug 6, 2012 at 3:41 PM, Keith Turner wrote: >> Instead of a new command, we could add an option to the egrep command, >> like -f. When the -f o

Re: Security and data design advice on structuring data on accumulo

2012-08-10 Thread Christopher Tubbs
I think an important take-away here (so far) is that you can't just use "doctor" as a role... because that doesn't encapsulate all the security considerations. Doctor X doesn't get to see patient Y's data, unless X is Y's doctor, or Y has signed a release for him/her to see it. So, "doctorOf" is an

Re: EXTERNAL: Re: Large files in Accumulo

2012-08-23 Thread Christopher Tubbs
You can still index a 1GB file... you just shouldn't try to push it all in in a single mutation, nor should you try to store it using a scheme that uses large keys. You can even still store the whole raw file in Accumulo, particularly if you chunk it up across multiple entries, but you may have to

Re: Accumulo Between Two Centers (DR - disaster recovery)

2012-09-26 Thread Christopher Tubbs
I believe Accumulo can work across data centers, if the underlying DFS span data centers. I also believe the latency tolerance is configurable, and matters for servers holding locks in Zookeeper and heartbeat messages to the Master. I'm not sure what the defaults for these are, though. On Wed, Sep

Re: Concurrent updates

2012-10-16 Thread Christopher Tubbs
If you're going to only do aggregation at the scan scope, you'd probably want to make sure you don't have the versioning iterator turned on for minc and majc scopes. Otherwise, you're scans may look different over time between initial ingest and later, when the data has been compacted on disk. --

Re: [VOTE] accumulo-1.4.2 RC2

2012-10-19 Thread Christopher Tubbs
I don't know that ACCUMULO-826 should be fixed before release, as I'm not sure there's a good fix without changing the API, and these issues may occur in several places in the MapReduce API. -- Christopher L Tubbs II http://gravatar.com/ctubbsii On Fri, Oct 19, 2012 at 3:41 PM, Eric Newton wrot

Re: Password File Config Property in 1.5 [SEC=UNCLASSIFIED]

2013-07-22 Thread Christopher Tubbs
That feature (ACCUMULO-489) had some fundamental flaws (ACCUMULO-826). One of the arguments made when rolling that back, was that the feature was not introduced in a minor release (it didn't appear in 1.4.0), so it wasn't part of the "1.4" contract. I apologize for the inconvenience this has caused