Return-Path: X-Original-To: apmail-zookeeper-user-archive@www.apache.org Delivered-To: apmail-zookeeper-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id CDF7C1834C for ; Fri, 1 Apr 2016 19:07:21 +0000 (UTC) Received: (qmail 71242 invoked by uid 500); 1 Apr 2016 19:07:21 -0000 Delivered-To: apmail-zookeeper-user-archive@zookeeper.apache.org Received: (qmail 71186 invoked by uid 500); 1 Apr 2016 19:07:21 -0000 Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@zookeeper.apache.org Delivered-To: mailing list user@zookeeper.apache.org Received: (qmail 71174 invoked by uid 99); 1 Apr 2016 19:07:20 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 01 Apr 2016 19:07:20 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id AF5181A0587 for ; Fri, 1 Apr 2016 19:07:19 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.806 X-Spam-Level: * X-Spam-Status: No, score=1.806 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_MSPIKE_BL=0.01, RCVD_IN_MSPIKE_L3=1.899, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=elyograg.org Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id 5el4lIAECzO0 for ; Fri, 1 Apr 2016 19:07:18 +0000 (UTC) Received: from frodo.elyograg.org (frodo.elyograg.org [166.70.79.219]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTP id AFD765FB0F for ; Fri, 1 Apr 2016 19:07:16 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by frodo.elyograg.org (Postfix) with ESMTP id 18CFA509F for ; Fri, 1 Apr 2016 13:07:10 -0600 (MDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=elyograg.org; h= content-transfer-encoding:content-type:content-type:in-reply-to :mime-version:user-agent:date:date:message-id:from:from :references:subject:subject:received:received; s=mail; t= 1459537629; bh=+DiQnEW4Rf4fPfQLseP/DuQT2yvccXQuUQ4bO/3rwYE=; b=W bLIEAi7CzHIj6vJ2pFl4mAufzOQIrPpUkx42YNyPUj72LFOjk8LOBoU8MfBDqPoD Z18xbreIjS0+tlFMyc/Tcv0o/U+lYe7rSJiqbO1ovce6FG1wX/C1nE8ILho4s8mM 3WW08fuP7hUPsJ08pX25aRJbxRTDcjA5WUDg6A9I34= X-Virus-Scanned: Debian amavisd-new at frodo.elyograg.org Received: from frodo.elyograg.org ([127.0.0.1]) by localhost (frodo.elyograg.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id J8RCmfOtTYoI for ; Fri, 1 Apr 2016 13:07:09 -0600 (MDT) Received: from [10.2.0.108] (client175.mainstreamdata.com [209.63.42.175]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: elyograg@elyograg.org) by frodo.elyograg.org (Postfix) with ESMTPSA id 0BE2B508A for ; Fri, 1 Apr 2016 13:07:08 -0600 (MDT) Subject: Re: Zookeeper with SSL release date To: user@zookeeper.apache.org References: <0454CD1B-9018-4D5F-A376-CD29525FF87B@apache.org> <58E62111-0064-4291-B376-D40FFCFFF2A9@apache.org> <56FEACD1.305@elyograg.org> From: Shawn Heisey Message-ID: <56FEC6DA.5080601@elyograg.org> Date: Fri, 1 Apr 2016 13:07:06 -0600 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit On 4/1/2016 12:32 PM, Alexander Shraer wrote: > I think we have some flexibility here since reconfig is a new feature so we > could > choose to be concervative and release it first only to people that do use > ACLs, but > I don't feel strongly about it, either way. I have no standing in this project, but if I did, I'd fight that proposal. I might lose, but that wouldn't stop me from trying. ACLs are a nice option, but I think they need to *remain* an option. If I'm using feature Y, and feature X is not intimately related in a way that cannot be separated, X should *not* be required to use Y, or vice-versa. I can't think of any good reason to require ACL enforcement before allowing dynamic ensemble membership. Is there some aspect of this that I'm missing? That could be the case. I'm not deeply familiar with ZK, and even less with 3.5. Thanks, Shawn