Hi Ram,
Yes, you will need a Kerberos instance, ZooKeeper doesn't have it bundled (
I don't think it's even possible especially in terms of security reasons).
Then you will have to configure SASL in ZooKeeper, as an additional layer
over Kerberos.
I'd say Kerberos is more secure, as for example you don't have your
password stored. But it is more complex to setup and you require a 3rd
party Kerberos instance. Lot of tutorial on it though. Like for example:
https://blog.bluesoftglobal.com/3-steps-to-apache-zookeeper-authentication/
https://github.com/ekoontz/zookeeper/wiki
At the end, I think it comes down to preference.
Regards,
Norbert
On Sat, Sep 22, 2018 at 1:40 PM rammohan ganapavarapu <
rammohanganap@gmail.com> wrote:
> Hi,
>
> To configure "Kerberos based authentication" on zookeeper server-server or
> client-server do we need to install any additional packages? do we need to
> setup kerberos server? or zookeeper embedded the kerberos server? and what
> is the recommended authentication mechanism, kerberos or digest-md5?
>
> Thanks,
> Ram
>
|