I see that the raw thrift API has a login() method, but when I setup a one-node cluster, I can simply connect localhost/9160 without any passwd
what is the current picture of the security model? how can I enforce authentication? I searched around, it seems that this is not clearly documented yet; the closest I found is: http://www.riptano.com/docs/0.6.5/install/auth-config http://cassandra-user-incubator-apache-org.3065146.n2.nabble.com/Authentication-td5285013.html#a5285013 I did start cassandra with the args mentioned above: bin/cassandra -Dpasswd.properties=mypasswd.properties -Daccess.properties=myaccess.properties -f but then I can still simply use the command line interface to connect localhost/9160 use myKeyspace without any authentication passwd