hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Peter Varga (Jira)" <j...@apache.org>
Subject [jira] [Commented] (HIVE-23045) Zookeeper SSL/TLS support
Date Thu, 26 Mar 2020 08:25:00 GMT

    [ https://issues.apache.org/jira/browse/HIVE-23045?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17067491#comment-17067491
] 

Peter Varga commented on HIVE-23045:
------------------------------------

[~dkuzmenko] uploaded the rebased patch.

> Zookeeper SSL/TLS support
> -------------------------
>
>                 Key: HIVE-23045
>                 URL: https://issues.apache.org/jira/browse/HIVE-23045
>             Project: Hive
>          Issue Type: Improvement
>          Components: HiveServer2, JDBC, Metastore
>            Reporter: Peter Varga
>            Assignee: Peter Varga
>            Priority: Critical
>              Labels: pull-request-available
>         Attachments: HIVE-23045.1.patch, HIVE-23045.10.patch, HIVE-23045.11.patch, HIVE-23045.2.patch,
HIVE-23045.3.patch, HIVE-23045.4.patch, HIVE-23045.5.patch, HIVE-23045.6.patch, HIVE-23045.7.patch,
HIVE-23045.8.patch, HIVE-23045.9.patch
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Zookeeper 3.5.5 server can operate with SSL/TLS secure connection with its clients.
> [https://cwiki.apache.org/confluence/display/ZOOKEEPER/ZooKeeper+SSL+User+Guide]
> The SSL communication should be possible in the different part of HIVE, where it communicates
with Zookeeper servers. The Zookeeper clients are used in the following places:
>  * HiveServer2 PrivilegeSynchronizer
>  * HiveServer2 register/remove server from Zookeeper
>  * HS2ActivePassiveHARegistryClient
>  * ZooKeeperHiveLockManager
>  * LLapZookeeperRegistryImpl
>  * TezAmRegistryImpl
>  * WebHCat ZooKeeperStorage
>  * JDBC Driver server lookup
>  * Metastore - ZookeeperTokenStore
>  * Metastore register/remove server from Zookeeper
> The flag to enable SSL communication and the required parameters should be provided by
different configuration parameters, corresponding the different use cases. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Mime
View raw message