phoenix-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rahul Shrivastava (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (PHOENIX-4085) SASL Authentication support for connecting to a ZooKeeper Quorum from PQS and Load Balancer
Date Mon, 14 Aug 2017 19:35:00 GMT

     [ https://issues.apache.org/jira/browse/PHOENIX-4085?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Rahul Shrivastava updated PHOENIX-4085:
---------------------------------------
    Description: 
PQS server registers to zookeeper. Load balancer connects to zookeeper to get list of PQS
server already registered to zookeeper. Currently the way things are wired up as follows

1. The LB and PQS uses digest to authenticate with ZK. The username and password is set in
hbase-site.xml as 
"phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
The permission on the znode (pqs) is set to read permission .

While this is ok to start, but we need support connecting to a ZooKeeper Quorum that supports
SASL authentication. 

https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL

  was:
PQS server registers to zookeeper. Load balancer connects to zookeeper to get list of PQS
server already registered to zookeeper. Currently the way things are wired up as as follows

1. The LB and PQS uses digest to authenticate with ZK. The username and password is set in
hbase-site.xml as 
"phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
The permission on the znode (pqs) is set to read permission .

While this is ok to start, but we need support connecting to a ZooKeeper Quorum that supports
SASL authentication. 

https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL


> SASL Authentication support for connecting to a ZooKeeper Quorum from PQS and Load Balancer
> -------------------------------------------------------------------------------------------
>
>                 Key: PHOENIX-4085
>                 URL: https://issues.apache.org/jira/browse/PHOENIX-4085
>             Project: Phoenix
>          Issue Type: Bug
>            Reporter: Rahul Shrivastava
>
> PQS server registers to zookeeper. Load balancer connects to zookeeper to get list of
PQS server already registered to zookeeper. Currently the way things are wired up as follows
> 1. The LB and PQS uses digest to authenticate with ZK. The username and password is set
in hbase-site.xml as 
> "phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
> ""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
> The permission on the znode (pqs) is set to read permission .
> While this is ok to start, but we need support connecting to a ZooKeeper Quorum that
supports SASL authentication. 
> https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message