You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@phoenix.apache.org by "Rahul Shrivastava (JIRA)" <ji...@apache.org> on 2017/08/14 19:35:00 UTC
[jira] [Updated] (PHOENIX-4085) SASL Authentication support for
connecting to a ZooKeeper Quorum from PQS and Load Balancer
[ https://issues.apache.org/jira/browse/PHOENIX-4085?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rahul Shrivastava updated PHOENIX-4085:
---------------------------------------
Description:
PQS server registers to zookeeper. Load balancer connects to zookeeper to get list of PQS server already registered to zookeeper. Currently the way things are wired up as follows
1. The LB and PQS uses digest to authenticate with ZK. The username and password is set in hbase-site.xml as
"phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
The permission on the znode (pqs) is set to read permission .
While this is ok to start, but we need support connecting to a ZooKeeper Quorum that supports SASL authentication.
https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL
was:
PQS server registers to zookeeper. Load balancer connects to zookeeper to get list of PQS server already registered to zookeeper. Currently the way things are wired up as as follows
1. The LB and PQS uses digest to authenticate with ZK. The username and password is set in hbase-site.xml as
"phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
The permission on the znode (pqs) is set to read permission .
While this is ok to start, but we need support connecting to a ZooKeeper Quorum that supports SASL authentication.
https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL
> SASL Authentication support for connecting to a ZooKeeper Quorum from PQS and Load Balancer
> -------------------------------------------------------------------------------------------
>
> Key: PHOENIX-4085
> URL: https://issues.apache.org/jira/browse/PHOENIX-4085
> Project: Phoenix
> Issue Type: Bug
> Reporter: Rahul Shrivastava
>
> PQS server registers to zookeeper. Load balancer connects to zookeeper to get list of PQS server already registered to zookeeper. Currently the way things are wired up as follows
> 1. The LB and PQS uses digest to authenticate with ZK. The username and password is set in hbase-site.xml as
> "phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
> ""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
> The permission on the znode (pqs) is set to read permission .
> While this is ok to start, but we need support connecting to a ZooKeeper Quorum that supports SASL authentication.
> https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)