Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 0B7B9200C1C for ; Wed, 15 Feb 2017 16:16:28 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id 09358160B5E; Wed, 15 Feb 2017 15:16:28 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 562DC160B46 for ; Wed, 15 Feb 2017 16:16:27 +0100 (CET) Received: (qmail 53118 invoked by uid 500); 15 Feb 2017 15:16:25 -0000 Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@zookeeper.apache.org Delivered-To: mailing list user@zookeeper.apache.org Received: (qmail 53107 invoked by uid 99); 15 Feb 2017 15:16:25 -0000 Received: from mail-relay.apache.org (HELO mail-relay.apache.org) (140.211.11.15) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 15 Feb 2017 15:16:25 +0000 Received: from mail-lf0-f41.google.com (mail-lf0-f41.google.com [209.85.215.41]) by mail-relay.apache.org (ASF Mail Server at mail-relay.apache.org) with ESMTPSA id 3AEDE1A00A2 for ; Wed, 15 Feb 2017 15:16:25 +0000 (UTC) Received: by mail-lf0-f41.google.com with SMTP id n124so82449233lfd.2 for ; Wed, 15 Feb 2017 07:16:25 -0800 (PST) X-Gm-Message-State: AMke39lWJkL/JjYrQuGCrJsOgFC4Ke/SjONy6QzZiVVUl2lLcDgWk+715AKhZepPBKoUX29ySzH0sl6H2Szzkg== X-Received: by 10.25.72.20 with SMTP id v20mr10631883lfa.46.1487171783625; Wed, 15 Feb 2017 07:16:23 -0800 (PST) MIME-Version: 1.0 Received: by 10.25.21.15 with HTTP; Wed, 15 Feb 2017 07:15:42 -0800 (PST) In-Reply-To: References: From: Patrick Hunt Date: Wed, 15 Feb 2017 07:15:42 -0800 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: Multiple credentials associated with same principal? To: UserZooKeeper Cc: Martin Gainty Content-Type: multipart/alternative; boundary=94eb2c1a1e1ae217540548932918 archived-at: Wed, 15 Feb 2017 15:16:28 -0000 --94eb2c1a1e1ae217540548932918 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Tue, Feb 14, 2017 at 7:41 AM, Stevo Slavi=C4=87 wrot= e: > Is this natively supported by ZooKeeper or does this require some > customization? > > Hi Stevo, I've never heard of anyone taking this approach, and I don't believe it is possible today. Regards, Patrick > On Thu, Feb 2, 2017 at 7:06 PM, Martin Gainty wrote= : > > > > > Stevo- > > ------------------------------ > > *From:* Stevo Slavi=C4=87 > > *Sent:* Thursday, February 2, 2017 7:38 AM > > *To:* user@zookeeper.apache.org > > *Subject:* Re: Multiple credentials associated with same principal? > > > > Alternatively, is it possible to set ACL that would grant given > permissions > > to any successfully authenticated user? > > > > MG>acl group should match subject=3DGroupOfPeople > > > > MG>ZooKeeperServer: > > MG>best to configure each ACL on server for Group where > > MG>ServerGroupACL=3DJAASSubject > > MG>e,g. GroupACL=3DJAASSubject=3DEmergencyRoomNurses > > > > MG>ZooKeeperClient: > > MG>since there can be multiple principals per subject > > MG>each Principal would represent an individual within the group > > MG>e.g. JAASPrincipal=3DNurseCratchett > > > > > > On Wed, Feb 1, 2017 at 1:16 PM, Stevo Slavi=C4=87 w= rote: > > > > > Hello Apache ZooKeeper community, > > > > > > Is it valid in JAAS config file to associate more than one password p= er > > > user, and if so, will ZooKeeper server authenticate user correctly if > > > provided password matches any of the configured ones? > > > > > > Kind regards, > > > Stevo Slavic. > > > > > > --94eb2c1a1e1ae217540548932918--