[
https://issues.apache.org/jira/browse/PHOENIX-4085?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rahul Shrivastava updated PHOENIX-4085:
---------------------------------------
Description:
PQS server registers to zookeeper. Load balancer connects to zookeeper to get
list of PQS server already registered to zookeeper. Currently the way things
are wired up as follows
1. The LB and PQS uses digest to authenticate with ZK. The username and
password is set in hbase-site.xml as
"phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
The permission on the znode (pqs) is set to read permission .
While this is ok to start, but we need support connecting to a ZooKeeper Quorum
that supports SASL authentication.
https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL
was:
PQS server registers to zookeeper. Load balancer connects to zookeeper to get
list of PQS server already registered to zookeeper. Currently the way things
are wired up as as follows
1. The LB and PQS uses digest to authenticate with ZK. The username and
password is set in hbase-site.xml as
"phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
The permission on the znode (pqs) is set to read permission .
While this is ok to start, but we need support connecting to a ZooKeeper Quorum
that supports SASL authentication.
https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL
> SASL Authentication support for connecting to a ZooKeeper Quorum from PQS and
> Load Balancer
> -------------------------------------------------------------------------------------------
>
> Key: PHOENIX-4085
> URL: https://issues.apache.org/jira/browse/PHOENIX-4085
> Project: Phoenix
> Issue Type: Bug
> Reporter: Rahul Shrivastava
>
> PQS server registers to zookeeper. Load balancer connects to zookeeper to get
> list of PQS server already registered to zookeeper. Currently the way things
> are wired up as follows
> 1. The LB and PQS uses digest to authenticate with ZK. The username and
> password is set in hbase-site.xml as
> "phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
> ""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
> The permission on the znode (pqs) is set to read permission .
> While this is ok to start, but we need support connecting to a ZooKeeper
> Quorum that supports SASL authentication.
> https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
