From user-return-11952-archive-asf-public=cust-asf.ponee.io@zookeeper.apache.org Mon Jun 10 21:00:08 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id DF054180649 for ; Mon, 10 Jun 2019 23:00:07 +0200 (CEST) Received: (qmail 83945 invoked by uid 500); 10 Jun 2019 21:00:05 -0000 Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@zookeeper.apache.org Delivered-To: mailing list user@zookeeper.apache.org Received: (qmail 83934 invoked by uid 99); 10 Jun 2019 21:00:05 -0000 Received: from Unknown (HELO mailrelay1-lw-us.apache.org) (10.10.3.159) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 10 Jun 2019 21:00:05 +0000 Received: from [192.168.1.27] (86FF699C.dsl.pool.telekom.hu [134.255.105.156]) by mailrelay1-lw-us.apache.org (ASF Mail Server at mailrelay1-lw-us.apache.org) with ESMTPSA id 402588B2C for ; Mon, 10 Jun 2019 21:00:05 +0000 (UTC) Subject: Re: ACL implimentation To: user@zookeeper.apache.org References: From: =?UTF-8?Q?Andor_Moln=c3=a1r?= Openpgp: preference=signencrypt Autocrypt: addr=andor@apache.org; prefer-encrypt=mutual; keydata= mQINBFspV7sBEADE8uw+howAopRrHVsNo7pYlKbP203uJvekgXrW1Y2LGItRLmpzF2jqh2Ra kmtkX5DvX9eUEepZsZYFhM5RmmniJJr5sVtP19SYIXnwuPoV9CAb6Txbf7vLa4wZo+AXNr3A ipaQuIT+tH75sjtCxjQoCrQ1c+Y4VjYjckhAr7FNUADjUCkMT7/rTWHc1kIbfazU581VheE6 uss0+hgSHsrcr0irANnswZgnW4LRvkvg0VbFE9lzoM1FfnycNbo9mw55lNQzz4FCTeewS3im Gia9dHA9Z67VlpUrjPn+I5aet4m82sfROWyOr4/fAsfpIzhNy9O55Dnao4d9k7sYNy0eTIkT aDGF5p6kJ+YL6udxXy7ClhkjY5xtz4b3dclFFzh9PyxuqbkbvU1DPenVPfY7/Qfo9rGobyPB zYDrDxkXbUOIDHB1cZ7Cx/t3HdlfHWqqmuLiV3msg/VGteLQfFep2MpbROSPGDmCXvFwVx4U 4xmcHWy418BKnePGDKgEQsVy3SjarK316MmjwFVcYFG7pdV+ErDUtS37DwvZ3gsGKpvGf41o qMSrOw/XbBSz0mFpLXaj4NfU6T6Am6w3B/rQ1084UycSo2ZneFjgQM4z7hEkwfoVYTUspf/U rZxfb8PELk1OoPnFfvMjp2In5sCpeQ9qc5vXrP3jztT8A3gQIwARAQABtCBBbmRvciBNb2xu w6FyIDxhbmRvckBhcGFjaGUub3JnPokCTgQTAQoAOBYhBD96HRb6Qhex3HXhyf/jW38V36G6 BQJbKVe7AhsDBQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEP/jW38V36G6TXkP/0FLBH4r u9bykZZml9IakrXqhgaI5lwNQ22J2WQ2UBZsKCOvxDQVtULD/RAL0AbpKrUIsKZZff8T7dA2 jrsOIUZV7C2vciRcrMOPM9PBj03+57VsTomrYo2iJn3v8g17FflUdUw1RGMXW4UlJTbcAWKT T1COQjpuR8ul1qwpIyKTzzGV2a2HcSnGLEYgsPedQR+tu1Lv6mI8WLPBbzpMdpvY0FoVLJIj jZFBNggBfaDoc88Cp4sDJviUzWblU4UCrz9nO6jp1D319EIzZHVR3+2nBOGUP0LKML1LSIKE RoSy/WVDithjR7vJOxKbGUXLdLJCE27SRwqrTWWhWZZiPDS81RNMaBAs52TI7AhAiy0fAHRA F3cPdkT1khplHrirUZ/8sKkE9kRmo2p0wqDFxPlvLdFW0Ca6zcrgdc8jI3VHyvscRcw/d5Uw s6+p8gao1/mujb+WOhDKYtauLKzYG1VefEvpdO2sQnFbXfEjI+SXZB7LKQCw71Zs9de3TBiT /5iG0UNIMfT8YploXXlwmjIlVySyRXCAs5HRa039XVpwOpaW3sH1diTQsuzLW3/qyenAt2sl rXRTHFbCzf/YziruqhH6I8E0qqRC8FS2h593OO4sKyADx193zcg8lxv/a8gNE4OaoXT+jlUU nPFXza9OOsNXVLXt5KHWvODfHnYouQINBFspV7sBEACeBluwP+o6DkSWlZJcxYTVP/euuLKg RQNLeY+cS05+qcijK+bBAHR5BSBX64inYiKSga0GGQHJSOTC6O3KP517olHdx4vukwv/LT4a CugT9ZQ2HeZRUt6l8Z6Aacu4nEZBg6EFv4Zlq35TPY4Mds6h/11mLyrZChdRo1ZjVV5QaGWz JwU3qnJ/g0346rgu/ceUfm8Eb+USv0geVW85DzDHjvDNciyWmUUqBF1btlv45ex53M6ZvmVk GERniDber58LMjMDCZ6Aj7S4CgPIzoGUwaJoGsPm3/8QFsLPkj3oHdVmPMhRK63a8iCvXMH0 cOn640F8rkw13owaBI0eoR/rnSNVDPw01rjwxQzpL+a4bIxSix056Lx7yuOppv87QpPc19Ic Ua7haAGj4fs9BpFAJR7EA030lPV2MKXbldT34C+f25bZtO1Sj0fw3T+1YcBKSS3xpU4hyf7I 6G5ISh8kfoO8OfUKU/6PpeAPy49dl8KJNLDoYnXJ+BFcq9Cx0epGUoHaNyyv8348SdJmixAN xeyETErKsFu1PaomZEg/fOBtO0JrZY0kpwllNm7wmXdkSurovcqhrQ76BbMdyyikpfbuFJB0 m4+dKxTNBDw89fLDYy61NDYiF6ytGkTAXHAAcEvx6k8eDtjtzQFqTxstSPOP6XMtnjpc4pId xgYSzwARAQABiQI2BBgBCgAgFiEEP3odFvpCF7HcdeHJ/+NbfxXfoboFAlspV7sCGwwACgkQ /+NbfxXfobooPg/9EFm5tsoATNTWwyPRUG5uPrDNJHrlw0o34iXeA7Er/Gdso5PBJuzAzTi/ n2H1AacHgnzOLcmVtkDakHq0WBBKy0E8n/0vedIECvoyN3HNkQ0nzuBPOEJwdHDr03x6BX+R rv+f3oR3YzOyW86Sw7Qlt8dGGACn7TQVOg0bSR03NDAb7vgvXSL/Xo2rySus/61QiBXKw9nS bSh4MBnMYRn57nHZ/DbFBYbvmiSQZO4fuQOew+IS8x/Bg3m5RHKLGw7MFNJn/KQG4YvNRlqa 3RhR4ReCjIq1EOSgx2en0dKRao/XfPgzZo2iEpLwBNxVcC3LyUTsGD6PUhyLJ06GuLBfLbxL ++iJEiUMZzpiKhkV9tl7agXMNKxSjDr6g93slkv6TWQ3oiFMgYVxbIUN9Do6WOwpZeOnjlbW 7+zNVhLc2sAnohc8Mr+00N/KenN/Br2g00zUI9yU34ZygP/NO2t7T+MGYr3T26ZcCodtWAam tT41bhhLuDw3euO+ZmaMaloCvtTvayMyd8EX9cJnZQ3iZdXmDgI+bYZk6J9eaDc2p7cjVMjd /N9r1XNVhm6+XRUm6hZQBORYm4H90v46eo+QgJhlcWPguqrjVAcxPgxH71LXCYaeLfT7CbxQ dcHpRcupIjmiAEN2DnUNhl3imlMjQxjWvW4f3mzYECHNs96iZgU= Message-ID: <34bcfda4-285c-2e1b-ce51-8495a2409c05@apache.org> Date: Mon, 10 Jun 2019 23:00:03 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------6DD5C30A953032D3933CDD51" Content-Language: en-GB --------------6DD5C30A953032D3933CDD51 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Agreed. I had to dig a bunch of Hortonworks / Stackoverflow docs to learn how ACLs work. Andor On 2019. 06. 09. 17:03, Patrick Hunt wrote: > I had to deal with some ACL issues myself recently and noticed the lack of > docs we have, both generally and best practices. I spent a bunch of time > when testing the recent ACL changes from Andor just re-learning the shell > commands and config necessary to exercise the patches. This would be a > great area for contributions. > > Patrick > > On Fri, Jun 7, 2019 at 8:04 AM rammohan ganapavarapu < > rammohanganap@gmail.com> wrote: > >> Enrico, >> >> Thank you. >> >> Ram >> >> On Fri, Jun 7, 2019 at 5:30 AM Enrico Olivelli >> wrote: >> >>> Ram >>> Can you describe better your problem ? >>> Usually you are activating auth on clients and then you apply the ACLs >> this >>> way all clients will be able to access data. >>> >>> Try our procedure in a staging environment before doing in in production >>> >>> Enrico >>> >>> Il gio 6 giu 2019, 23:56 rammohan ganapavarapu >>> ha >>> scritto: >>> >>>> Hi, >>>> >>>> Is there any recommendations or best practices on implementing ACL on >>>> existing zookeeper cluster with production data with out downtime? >>>> >>>> Thanks, >>>> Ram >>>> --------------6DD5C30A953032D3933CDD51--