[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-1045?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15036430#comment-15036430
 ] 

Powell Molleti commented on ZOOKEEPER-1045:
-------------------------------------------

Hi Sasha,

Will SSL based Cert authentication solve your problem?. Mind that there are two 
channels/tcp connections between Quorum Peers one for election and other for 
ZAB. One can create a CA cert for a ZK cluster and use that to sign the cert of 
each ZK node. Which will ensure that nodes signed by this CA cert, i.e part of 
this cluster, can connect to each other.

Let me know if this works for your use case.
Thanks
Powell.

> Quorum Peer mutual authentication
> ---------------------------------
>
>                 Key: ZOOKEEPER-1045
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1045
>             Project: ZooKeeper
>          Issue Type: New Feature
>          Components: server
>            Reporter: Eugene Koontz
>
> ZOOKEEPER-938 addresses mutual authentication between clients and servers. 
> This bug, on the other hand, is for authentication among quorum peers. 
> Hopefully much of the work done on SASL integration with Zookeeper for 
> ZOOKEEPER-938 can be used as a foundation for this enhancement.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to