You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@zookeeper.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2019/02/13 15:24:00 UTC

[jira] [Commented] (ZOOKEEPER-3239) Adding EnsembleAuthProvider to verify the ensemble name

    [ https://issues.apache.org/jira/browse/ZOOKEEPER-3239?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16767302#comment-16767302 ] 

Hudson commented on ZOOKEEPER-3239:
-----------------------------------

FAILURE: Integrated in Jenkins build Zookeeper-trunk-single-thread #233 (See [https://builds.apache.org/job/Zookeeper-trunk-single-thread/233/])
ZOOKEEPER-3239: Adding EnsembleAuthProvider to verify the ensemble name (andor: rev dc909724700e39145c2ca71cee5864fe6c074e3e)
* (edit) zookeeper-server/src/main/java/org/apache/zookeeper/server/ServerMetrics.java
* (edit) zookeeper-server/src/test/java/org/apache/zookeeper/server/MockServerCnxn.java
* (add) zookeeper-server/src/main/java/org/apache/zookeeper/server/auth/EnsembleAuthenticationProvider.java
* (edit) zookeeper-docs/src/main/resources/markdown/zookeeperAdmin.md
* (edit) zookeeper-server/src/main/java/org/apache/zookeeper/server/ServerCnxn.java
* (edit) zookeeper-server/src/main/java/org/apache/zookeeper/server/ZooKeeperServer.java
* (edit) zookeeper-server/src/main/java/org/apache/zookeeper/server/auth/ProviderRegistry.java
* (add) zookeeper-server/src/test/java/org/apache/zookeeper/test/EnsembleAuthTest.java
* (edit) zookeeper-server/src/main/java/org/apache/zookeeper/server/DumbWatcher.java


> Adding EnsembleAuthProvider to verify the ensemble name
> -------------------------------------------------------
>
>                 Key: ZOOKEEPER-3239
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-3239
>             Project: ZooKeeper
>          Issue Type: Improvement
>            Reporter: Jie Huang
>            Assignee: Jie Huang
>            Priority: Minor
>              Labels: pull-request-available
>             Fix For: 3.6.0
>
>          Time Spent: 1h 40m
>  Remaining Estimate: 0h
>
> This AuthenticationProvider checks to make sure that the ensemble name the client intends to connect to matches the name that the server thinks it belongs to. If the name does not match,
> this provider will close the connection
> This AuthenticationProvider does not "authenticate" the client. It prevents the client accidentally connecting to a wrong ensemble.
> This feature has been implemented in the Facebook internal branch and I'm going to upstream it to the trunk.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)