zookeeper-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Chris Brown <chrisbr...@salesforce.com>
Subject X509 setAcl in zkCli
Date Tue, 18 Dec 2018 20:54:02 GMT
Hi,

I have a working mutual auth environment.  When the client connects to the
server it is assigned these credentials (yes I was lazy, this is a trial):

Authenticated Id
'CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown' for Scheme
'x509'

How do I enter this into zkCli.sh for create or setAcl?  I've tried a
number of variations and the closest I think I've been able to get is:

create /t4 'nib'
'x509:CN=Unknown%2COU=Unknown%2CO=Unknown%2CL=Unknown%2CST=Unknown%2CC=Unknown:cdrwa'

But that results in:

[zk: localhost:2281(CONNECTED) 3] getAcl /t4
'x509,'CN=Unknown%252COU=Unknown%252CO=Unknown%252CL=Unknown%252CST=Unknown%252CC=Unknown
: cdrwa

Which doesn't work.  What is the right incantation to get this working?

Thanks,
Chris

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message