[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tamas Penzes updated ZOOKEEPER-1467: Issue Type: Improvement (was: Bug) > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Improvement > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Major > Labels: Security, client, kerberos, sasl > Fix For: 3.6.0 > > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tamas Penzes updated ZOOKEEPER-1467: Priority: Major (was: Critical) > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Bug > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Major > Labels: Security, client, kerberos, sasl > Fix For: 3.6.0 > > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tamas Penzes updated ZOOKEEPER-1467: Fix Version/s: (was: 3.5.5) > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Improvement > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Major > Labels: Security, client, kerberos, sasl > Fix For: 3.6.0 > > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andor Molnar updated ZOOKEEPER-1467: Affects Version/s: (was: 4.0.0) > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Bug > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Critical > Labels: Security, client, kerberos, sasl > Fix For: 3.6.0, 3.5.5 > > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Han updated ZOOKEEPER-1467: --- Fix Version/s: (was: 3.5.3) 3.5.4 > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Bug > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0, 4.0.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Critical > Labels: Security, client, kerberos, sasl > Fix For: 3.5.4, 3.6.0 > > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Chris Nauroth updated ZOOKEEPER-1467: - Fix Version/s: (was: 3.5.2) 3.5.3 > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Bug > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0, 4.0.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Critical > Labels: Security, client, kerberos, sasl > Fix For: 3.6.0, 3.5.3 > > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Patrick Hunt updated ZOOKEEPER-1467: Priority: Critical (was: Blocker) > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Bug > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0, 4.0.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Critical > Labels: Security, client, kerberos, sasl > Fix For: 3.5.2, 3.6.0 > > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Rakesh R updated ZOOKEEPER-1467: Fix Version/s: 3.6.0 3.5.2 > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Bug > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0, 4.0.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Blocker > Labels: Security, client, kerberos, sasl > Fix For: 3.5.2, 3.6.0 > > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eugene Koontz updated ZOOKEEPER-1467: - Attachment: ZOOKEEPER-1467.patch Improved patch with tests and comments. > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Bug > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0, 4.0.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Blocker > Labels: Security, client, kerberos, sasl > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eugene Koontz updated ZOOKEEPER-1467: - Release Note: Allow system property "zookeeper.clusterName", if defined, to be used as the instance portion of zookeeper server's Kerberos principal name. Otherwise, server's hostname will be used. (was: This patch does not yet contain any new tests.) > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Bug > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0, 4.0.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Blocker > Labels: Security, client, kerberos, sasl > Attachments: ZOOKEEPER-1467.patch, ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (ZOOKEEPER-1467) Server principal on client side is derived using hostname.
[ https://issues.apache.org/jira/browse/ZOOKEEPER-1467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eugene Koontz updated ZOOKEEPER-1467: - Attachment: ZOOKEEPER-1467.patch Allows use of the 'zookeeper.clusterName' system property to specify the instance portion (the part after the slash character) of the Zookeeper server principal name. > Server principal on client side is derived using hostname. > -- > > Key: ZOOKEEPER-1467 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1467 > Project: ZooKeeper > Issue Type: Bug > Components: java client >Affects Versions: 3.4.3, 3.4.4, 3.5.0, 4.0.0 >Reporter: Laxman >Assignee: Eugene Koontz >Priority: Blocker > Labels: Security, client, kerberos, sasl > Attachments: ZOOKEEPER-1467.patch > > > Server principal on client side is derived using hostname. > org.apache.zookeeper.ClientCnxn.SendThread.startConnect() > {code} >try { > zooKeeperSaslClient = new > ZooKeeperSaslClient("zookeeper/"+addr.getHostName()); > } > {code} > This may have problems when admin wanted some customized principals like > zookeeper/cluste...@hadoop.com where clusterid is the cluster identifier but > not the host name. > IMO, server principal also should be configurable as hadoop is doing. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira