zookeeper-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From rammohan ganapavarapu <rammohanga...@gmail.com>
Subject Re: Kerberos based authentication
Date Mon, 24 Sep 2018 17:57:18 GMT
Thank you  Norbert!, i was not sure if we need one or not, it may be good
to capture that in doc as pre requisites? i know lot of people know that
but it may help people like me.

Ram

On Mon, Sep 24, 2018 at 10:45 AM Norbert Kalmar
<nkalmar@cloudera.com.invalid> wrote:

> Hi Ram,
>
> Yes, you will need a Kerberos instance, ZooKeeper doesn't have it bundled (
> I don't think it's even possible especially in terms of security reasons).
> Then you will have to configure SASL in ZooKeeper, as an additional layer
> over Kerberos.
>
> I'd say Kerberos is more secure, as for example you don't have your
> password stored. But it is more complex to setup and you require a 3rd
> party Kerberos instance. Lot of tutorial on it though. Like for example:
> https://blog.bluesoftglobal.com/3-steps-to-apache-zookeeper-authentication/
> https://github.com/ekoontz/zookeeper/wiki
>
> At the end, I think it comes down to preference.
>
> Regards,
> Norbert
>
> On Sat, Sep 22, 2018 at 1:40 PM rammohan ganapavarapu <
> rammohanganap@gmail.com> wrote:
>
> > Hi,
> >
> > To configure "Kerberos based authentication" on zookeeper server-server
> or
> > client-server do we need to install any additional packages? do we need
> to
> > setup kerberos server? or zookeeper embedded the kerberos server? and
> what
> > is the recommended authentication mechanism, kerberos or digest-md5?
> >
> > Thanks,
> > Ram
> >
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message