Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@zookeeper.apache.org
Received-SPF: pass (nike.apache.org: domain of mutsuzaki@gmail.com designates
 209.85.214.54 as permitted sender)
MIME-Version: 1.0
Reply-To: michi@cs.stanford.edu
Sender: mutsuzaki@gmail.com
In-Reply-To: 
 <E195B18E0EBA0E4AB3F317A39FF8BB9B599B965B@ASHBDAG1M1.resource.ds.bah.com>
References: 
 <E195B18E0EBA0E4AB3F317A39FF8BB9B599B965B@ASHBDAG1M1.resource.ds.bah.com>
Date: Wed, 29 May 2013 15:28:24 -0700
Message-ID: 
 <CAHYqJpGO-N3rZm7bL+5hE8G24t5=5BuQhVAtcD0X_7jCioBPqQ@mail.gmail.com>
Subject: Re: Ip ACL
From: Michi Mutsuzaki <michi@cs.stanford.edu>
To: user@zookeeper.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi Janet,

I'm guessing the client IP address the server sees is 127.0.0.1 (which
is probably different from the ip address you specify in addAuthInfo)
if the client and the server are running on a same host. You can try
passing 127.0.0.1 to addAuthInfo and see if it works.

--Michi

On Wed, May 29, 2013 at 1:09 PM, Proctor, Janet [USA]
<proctor_janet@bah.com> wrote:
> Hello,
>
>
>
> I am trying to use ACLs to lock down znodes to a specific Ip Address. I a=
m getting a NoAuth error when I try create the sturcture /testkeystore/cert=
s/somecert.pem.  I create the node /testkeystore with an ACL of cdrwa with =
no problem. When I try to attach certs to /testkeystore (/testkeystore/cert=
s), I get an the NoAuth error on the create method below.  I had to type th=
is code in email, beacuse it lives a different network. Please excuse mista=
bbling. It should compile. I've tried to account for all of the braces. Als=
o, please forgive the catch all exceptions, I'm just trying to get things t=
o work.
>
>
>
>
>
> My code is as follows:
>
>
>
> DataStore mystore =3D new DataStore();
>
> mystore.connect();
>
> mystore.create("testkeystore", null);
>
> mystore.copyFolder(new File("home/hadoop/testkeystore/certs"), "/testkeys=
tore/certs");
>
> mystore.close();
>
>
>
>
>
> public class DataStore implements Watcher {
>
>
>
> private ZooKeeper zk;
>
> List <ACL> aclLst =3D new ArrayList<ACL> (1);
>
>
>
> public void connect throws IOException, InterruptedException {
>
>
>
> zk =3D new Zookeeper("localhost", SESSION_TIMEOUT, this);
>
> zk.addAuthInfo("ip", "#.#.#.#) //the #s are the ip address of the server =
that i'm running zookeeper on and executing this code on
>
> aclLst.add(new ACL(Perms.ALL, new Id("ip", "#.#.#.#")));
>
> connectedSignal.await()
>
>
>
> }
>
>
>
> public void create(String path, byte [] fileBytes) throws KeeperException=
, InterruptedException, Exception
>
> {
>
> Stat stat =3D zk.exists(path, false);
>
>
>
>     if(stat =3D=3D null){
>
>         zk.create(path, fileBytes, aclLst, CreateMode.PERSISTENT);
>
>     }
>
>
>
>     else
>
>     {
>
>         zk.setData(path, fileBytes, -1);
>
>     }
>
> }
>
>
>
>
>
> public void copyFolder(File srcFolder, String dst) throws Exception
>
> {
>
>     String dstFolder =3D dst;
>
>
>
>
>
>         if(srcFolder.isDirectory())
>
>         {
>
>             Stat stat =3D zk.exists(dst, false);
>
>
>
>         if(stat =3D=3D null){
>
>             zk.create(dst, new byte[0], aclLst, CreateMode.PERSISTENT);
>
>         }
>
>         String files [] =3D srcFolder.list();
>
>         for(String file:files)
>
>         {
>
>             File srcFile =3D new File(srcFolder, file);
>
>             dstFolder =3D dst + "/" + file;
>
>
>
>         //recursive copy
>
>         copyFolder(srcFile, dstFolder);
>
>         }
>
>
>
>     }
>
>     else
>
>     {
>
>
>
>         copyFromLocal(srcFolder.getPath, dstFolder);
>
>     }
>
>
>
> }
>
>
>
> public void copyFromLocal(String src, String dst) throws Exception
>
> {
>
> File srcFile =3D new File (src);
>
> file byte [] fileBytes;
>
>
>
> InputStream in =3D null;
>
>
>
>     try{
>
>
>
>          in =3D new FileInputStream(srcFile);
>
>          fileBytes =3D readFully(in)_;
>
>         create(dst, fileBytes);
>
>         }
>
>
>
>     finally {
>
>     if(in !=3D null)
>
>         try {
>
>         in.close();
>
>         }
>
>
>
>         catch(Exception ignore) {
>
>         }
>
>     }
>
>
>
> }
>
>
>
> private static byte [] readFully(final InputStream in ) throws IOExceptio=
n {
>
>
>
> final ByteArrayOutputStream buf1 =3D new ByteArrayOutputStream();
>
> final byte [] buf2 =3D new byte[8*1024];
>
> for(int read; (read =3D in.read(buf2)) >0;){
>
>     buf1.write(buf2, 0, read);
>
>     }
>
> return buf1.toByteArray();
>
> }
>
>
>
> }
>
>
>
>
>
>
>
> Janet Proctor, PMP
> Booz Allen Hamilton
> 301-617-2565 (Booz Allen)
> 410-854-3559(Client Site)