Mailing-List: contact zookeeper-user-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: zookeeper-user@hadoop.apache.org
Received-SPF: pass (nike.apache.org: domain of
 Prashant.Mekaraj@morganstanley.com designates 205.228.53.69 as permitted
 sender)
From: "Mekaraj, Prashant" <Prashant.Mekaraj@morganstanley.com>
To: <zookeeper-user@hadoop.apache.org>
Date: Wed, 6 Jan 2010 10:25:02 +0000
Subject: RE: Pluggable authentication question
Thread-Topic: Pluggable authentication question
thread-index: AcqORaAyMqOlUfioR3yW3vGVKG26aAAc2jAg
Message-ID: 
 <2BC67CC22BD6B048A12DD9C4D48EFDD790B3E8174C@LNWEXMBX0105.msad.ms.com>
References: 
 <2BC67CC22BD6B048A12DD9C4D48EFDD790B3E8146A@LNWEXMBX0105.msad.ms.com>
 <4B43A09C.3020507@apache.org>
In-Reply-To: <4B43A09C.3020507@apache.org>
Accept-Language: en-US
Content-Class: urn:content-classes:message
Content-Language: en-US
Importance: normal
Priority: normal
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Hi Patrick,
Thanks a lot for your reply and the patch. I'll subclass ZooKeeper for =
now until 3.3.0 comes out.

Unfortunately my Kerberos auth plugin is a thin wrapper around a bunch =
of internal libraries that were built to make these sort of integrations =
easier. So, there isn't much point in releasing just the plugin. I am, =
however, going to try to work out if I can do this using only standard =
libraries and if it works, I will be sure to contribute the code back.

Thanks for all the effort the zookeeper teams putting in, it is much =
appreciated.

Regards
-prashant

> -----Original Message-----
> From: Patrick Hunt [mailto:phunt@apache.org]
> Sent: 05 January 2010 20:27
> To: zookeeper-user@hadoop.apache.org
> Subject: Re: Pluggable authentication question
>=20
> Hi Mekaraj, this has been addressed in the trunk:
> https://issues.apache.org/jira/browse/ZOOKEEPER-544
> it will be available in 3.3.0
>=20
> You can do similar to this patch prior to 3.3.0 by creating your own
> subclass of ZooKeeper and accessing through the cnxn protected field
> (similar to how the 544 patch does it, but not as cleanly).
>=20
> I'd encourage you to contribute back your work. We'd love to have a
> Kerberos auth plugin as part of the release.
>=20
> Regards,
>=20
> Patrick
>=20
> Mekaraj, Prashant wrote:
> > Hi, I am using ZooKeeper 3.2.2 and trying to build a custom Kerberos
> > based authentication plugin for it. I have the plugin working
> > functionally, but I need one additional bit of information that I
> > don't see anywhere on the zookeeper API. To make a Kerberos
> > connection, the client needs to know the name of the server to set
> > the principal correctly. Since zookeeper randomly picks a server =
from
> > the set of servers passed to it, I was looking to see if there is a
> > method that would return the server name it actually connected to
> > after it fires the SyncConnected event.
> >
> > Is there a way to get this information in the C or the Java API ?
> >
> > Thanks -prashant
> >
> > =
---------------------------------------------------------------------
> -----
> >  NOTICE: If received in error, please destroy, and notify sender.
> > Sender does not intend to waive confidentiality or privilege. Use of
> > this email is prohibited when received in error. We may monitor and
> > store emails to the extent permitted by applicable law.
> >

-------------------------------------------------------------------------=
-
NOTICE: If received in error, please destroy, and notify sender. Sender =
does not intend to waive confidentiality or privilege. Use of this email =
is prohibited when received in error. We may monitor and store emails to =
the extent permitted by applicable law.