You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@zookeeper.apache.org by Guilherme Ramos <gu...@gmail.com> on 2020/05/05 15:25:54 UTC
ZOOKEEPER-1634: hardening security by teaching server to enforce
client authentication
Hello.
As requested by Enrico Olivelli, I'm trying to use Zookeeper to 3.6.1
using SASL, jaas(with Server defined) and still accepting client
connections without credentials.
What can be done here? Is there a roadmap to fix this?
Thank you.
Re: ZOOKEEPER-1634: hardening security by teaching server to enforce
client authentication
Posted by Andor Molnar <an...@apache.org>.
Oh, that’s great!
Have you enabled ‘sessionRequireClientSASLAuth’?
Andor
> On 2020. May 5., at 17:59, Enrico Olivelli <eo...@gmail.com> wrote:
>
> Andor
> With ZOOKEEPER-1634 it has been implemented
>
> I think it was a contribution from Twitter
>
> Enrico
>
> Il Mar 5 Mag 2020, 17:51 Andor Molnar <an...@apache.org> ha scritto:
>
>> Authentication cannot be enforced currently.
>> What you can do is to enable SASL on one hand and set up ACLs for znodes
>> to be protected on the other hand.
>>
>> Andor
>>
>>
>>
>>> On 2020. May 5., at 17:25, Guilherme Ramos <gu...@gmail.com> wrote:
>>>
>>> Hello.
>>> As requested by Enrico Olivelli, I'm trying to use Zookeeper to 3.6.1
>>> using SASL, jaas(with Server defined) and still accepting client
>>> connections without credentials.
>>>
>>> What can be done here? Is there a roadmap to fix this?
>>>
>>> Thank you.
>>
>>
Re: ZOOKEEPER-1634: hardening security by teaching server to enforce
client authentication
Posted by Enrico Olivelli <eo...@gmail.com>.
Andor
With ZOOKEEPER-1634 it has been implemented
I think it was a contribution from Twitter
Enrico
Il Mar 5 Mag 2020, 17:51 Andor Molnar <an...@apache.org> ha scritto:
> Authentication cannot be enforced currently.
> What you can do is to enable SASL on one hand and set up ACLs for znodes
> to be protected on the other hand.
>
> Andor
>
>
>
> > On 2020. May 5., at 17:25, Guilherme Ramos <gu...@gmail.com> wrote:
> >
> > Hello.
> > As requested by Enrico Olivelli, I'm trying to use Zookeeper to 3.6.1
> > using SASL, jaas(with Server defined) and still accepting client
> > connections without credentials.
> >
> > What can be done here? Is there a roadmap to fix this?
> >
> > Thank you.
>
>
Re: ZOOKEEPER-1634: hardening security by teaching server to enforce
client authentication
Posted by Andor Molnar <an...@apache.org>.
Authentication cannot be enforced currently.
What you can do is to enable SASL on one hand and set up ACLs for znodes to be protected on the other hand.
Andor
> On 2020. May 5., at 17:25, Guilherme Ramos <gu...@gmail.com> wrote:
>
> Hello.
> As requested by Enrico Olivelli, I'm trying to use Zookeeper to 3.6.1
> using SASL, jaas(with Server defined) and still accepting client
> connections without credentials.
>
> What can be done here? Is there a roadmap to fix this?
>
> Thank you.