Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@zookeeper.apache.org
Message-Id: <1503349585.3811895.1080497040.222C50B9@webmail.messagingengine.com>
From: Abraham Fine <afine@apache.org>
To: user@zookeeper.apache.org
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"
Subject: Re: How to prevent others from accessing our zookeeper service?
In-Reply-To: <23F1C6CA-0DAA-48D8-BED6-D2A33AEE6399@163.com>
References: <23F1C6CA-0DAA-48D8-BED6-D2A33AEE6399@163.com>
Date: Mon, 21 Aug 2017 14:06:25 -0700
archived-at: Mon, 21 Aug 2017 21:06:29 -0000

My understanding is that there is no current way to keep anonymous users
from connecting at all.=20

There have been numerous proposals to use SASL to solve this problem and
there is an open PR by Michael Han
(https://github.com/apache/zookeeper/pull/118), but nothing of the sort
has been committed yet.=20

Thanks,
Abe

On Mon, Aug 21, 2017, at 01:34, baidu wrote:
> Hi,=20
>=20
> I=E2=80=99ve read documents about zookeeper authentication and acl. To my
> knowledge, this mechanism can only control the access of specified
> znodes. To prevent others from accessing our zookeeper service, we need
> set acl for all the znodes.=20
>=20
> Is there any other way to do this?=20
>=20
>=20
> Best wishes,
> Dan