[jira] [Comment Edited] (ZOOKEEPER-3818) zkServer.sh status command exits if clientPort is missing even if secureClientPort is present for SSL

["Mate Szalay-Beko (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/ZOOKEEPER-3818?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17100660#comment-17100660 ] 

Mate Szalay-Beko edited comment on ZOOKEEPER-3818 at 5/6/20, 10:46 AM:
-----------------------------------------------------------------------

well, maybe the release notes should be more precise :)
all 3.5.x after 3.5.5 is considered as production stable. There are relatively few changes in the bugfix releases, but still each bugfix release contains important security and other fixes. So I would recommend to use the 3.5.<latest> in production. (FYI: 3.5.8 will be released very soon, we are in the middle of the release process and tests)

About 3.6 I am not sure. I know that some in the community are using it in production, but I think they are still in minority.


was (Author: symat):
well, maybe the release notes should be more precise :)
all 3.5.x after 3.5.5 is considered as production stable. There are relatively few changes in the bugfix releases, but still each bugfix release contains important security and other fixes. So I would recommend to use the 3.5.<latest> in production.

About 3.6 I am not sure. I know that some in the community are using it in production, but I think they are still in minority.

> zkServer.sh status command exits if clientPort is missing even if secureClientPort is present for SSL
> -----------------------------------------------------------------------------------------------------
>
>                 Key: ZOOKEEPER-3818
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-3818
>             Project: ZooKeeper
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 3.5.5
>            Reporter: Aishwarya Soni
>            Assignee: Mate Szalay-Beko
>            Priority: Critical
>
> I am configuring SSL on Zookeeper 3.5.5 branch and have removed the clientPort config from zoo.cfg and adding onlysecureClientPort. Also, I have removed it from my server ensemble connection string in zoo.cfg.dynamic file as it results in a port binding issue on the port 2181 if we keep it in both the files.
> But, in zkServer.sh, it checks if the clientPort is set in the *status* cmd else it throws exit 1 and terminates the process. How to overcome this situation? We cannot see the clientPort in zoo.cfg as it would enable mixed mode which we do not want when we enable SSL.
> Also, I am using zkServer.sh status output as a healthcheck for our containerized zookeeper to see if thee quorum is established or not as in cluster mode, zookeeper can finally run either in follower or leader state (ignoring intermediate state changes). So as the status output throws exit 1, the healthcheck is also failing.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)