Re: Zookeeper client fails during SASL authentication

Hi, I tried it a few months ago and managed to do it. I am not either an expert on this but managed to do the SASL authentication between ZK and client I ran the Kerberos server using this image https://hub.docker.com/r/gcavalcante8808/krb5-server/. Thanks On Thu, Jun 11, 2020 at 9:12 AM

Znodes not cleaning up

Hi, The Znodes (with world auth scheme) that my application creates were getting cleaned up by ZK if my application stops and I could see below message in ZK console. *2020-01-19 22:00:56,397 [myid:1] - INFO [ContainerManagerTask:ContainerManager@119] - Attempting to delete candidate

Re: Zookeeper and curator SASL authentication

authentication_sasl_gssapi.html > > > > Il giorno 15/01/20, 13:17 "Arpit Jain" ha > scritto: > > I have not passed those parameters. Is this something I need to set in > Zookeeper (zoo.cfg) ? > > On Wed, Jan 15, 2020 at 12:12 PM Enrico Olivelli

Re: Zookeeper and curator SASL authentication

urator)? > > On Tue, Jan 14, 2020 at 2:48 PM Arpit Jain wrote: > >> Thanks for the clarification. >> I am able to authenticate client with Zookeeper. However, when I started >> to set ACLs with the same client, I get error messages. This i

Zookeeper ACL creation using SASL Kerberos authorization

ZK version 3.5.6 Curator version: 4.2.0 I am able to authenticate client principal on ZK sever but it fails while setting ACL Logs on Zookeeper server side: *2020-01-14 15:05:27,177 [myid:1] - INFO [NIOWorkerThread-2:SaslServerCallbackHandler@120] - Successfully authenticated client:

Re: Zookeeper and curator SASL authentication

ver principal name in the client. > See: > https://github.com/apache/zookeeper/blob/1c5d135d74f16275876c024401dc2de92909b20a/zookeeper-server/src/main/java/org/apache/zookeeper/SaslServerPrincipal.java#L50 > > On Mon, Jan 13, 2020 at 6:03 PM Arpit Jain wrote: > >> Does this user name have to

Re: Authorisation in Zookeeper

Which authorization scheme is used for this kind of authorization using Unix user ids? Thanks On Sat, Jan 11, 2020, 1:05 PM Enrico Olivelli wrote: > Il giorno sab 11 gen 2020 alle ore 09:31 shrikant kalani < > shrikantkal...@gmail.com> ha scritto: > > > > > My system account means a client

Re: Zookeeper and curator SASL authentication

The solution is to pass JAAS file with -Djava.security.auth.login.config=/path/to/jaas.conf. Using System.setProperty does not work for me. On Thu, Jan 9, 2020 at 3:49 PM Szalay-Bekő Máté wrote: > I also faced this exception not long ago. I think it is an edge case, most > probably you have

Zookeeper and curator SASL authentication

Hi, I am trying to do SASL authentication between ZK and curator. Principal for curator is added in Kerberos server. While starting up curator, I see below message in logs even though JAAS file has "Client" section. I am also setting -Dzookeeper.sasl.clientconfig="Client" system variable.

Re: Zookeeper server and client authentication

Zookeeper server is not running with Zookeeper I’d then you > > need to set Zookeeper.sasl.client.username > > 2) set java.security.auth.login.config > > > > And I also faced the same issue that there is no strict enforcement to > > allow only authenticated client. Unless someone is aware of t

Zookeeper server and client authentication

Hi, I have configured Zookeeper 3.5.5 to use SASL authentication using Kerberos. I am able to authenticate ZK with Kerberos server but I don't see any authentication happening between Zookeeper client (curator) and ZK server. I have put the following setting in zoo.cfg and followed this guide