Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Securing zookeeper, where to start?

I feel lost trying to figure out what my options are. Apache's programmers guide and administrators guide do not detail anything substantial. My O'Reilly Zookeeper book barely talks about security... did I miss something? I was hoping to find tutorials through google about authenticating client connections, authorizing actions, and encrypting messages sent between zookeepers and client.

like image 534
smuggledPancakes Avatar asked Aug 19 '15 21:08

smuggledPancakes


People also ask

How do I start the ZooKeeper command?

To start the ZooKeeper server on a Linux system, use the Zookeeper/zookeeper/bin/zkServer.sh restart command from your Watson Explorer installation directory. On Microsoft Windows systems, use the Zookeeper\zookeeper\bin\zkServer. cmd command.

How do I set up a quorum on ZooKeeper?

Create a file named as myid under the Zookeeper data directory in each Zookeeper server. This file should contain the server number X as an entry in it. server_name is the hostname of the node where the Zookeeper service is started. port1 , ZooKeeper server uses this port to connect followers to the leader.


1 Answers

I had a lot of trouble but I figured it out and the links at the bottom where a huge help to me.

This code (using Curator) was something hard to figure out:

List<ACL> myAclList = new ArrayList<ACL>();
aclList.add(new ACL(ZooDefs.Perms.ALL, ZooDefs.Ids.AUTH_IDS));
client.create(withACL(myAclList)).forPath(myPath);

If I setup the zookeeper configuration correctly, then it will enforce that only the AUTH_IDS will be allowed to access my ZNode.

Ofiicial documentation, My mailing list Q1, My mailing list Q2, JIRA that I found useful, but some items are out of date

like image 114
smuggledPancakes Avatar answered Oct 13 '22 09:10

smuggledPancakes