[
https://issues.apache.org/jira/browse/ZOOKEEPER-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17406702#comment-17406702
]
yuezhongtao edited comment on ZOOKEEPER-4361 at 8/30/21, 12:31 PM:
-------------------------------------------------------------------
zookeeper sasl server relevant code is located at
org.apache.zookeeper.util.SecurityUtils#createSaslServer:
{code:java}
else {
// JAAS non-GSSAPI authentication: assuming and supporting only
// DIGEST-MD5 mechanism for now.
// TODO: use 'authMech=' value in zoo.cfg.
try
{ SaslServer saslServer = Sasl.createSaslServer("DIGEST-MD5", protocol,
serverName, null, callbackHandler); return saslServer; }
catch (SaslException e)
{ LOG.error("Zookeeper Quorum member failed to create a SaslServer to interact
with a client during session initiation", e); }
}
{code}
was (Author: yuezht):
zookeeper sasl server relevant code implementation is located at
org.apache.zookeeper.util.SecurityUtils#createSaslServer:
{code:java}
else {
// JAAS non-GSSAPI authentication: assuming and supporting only
// DIGEST-MD5 mechanism for now.
// TODO: use 'authMech=' value in zoo.cfg.
try
{ SaslServer saslServer = Sasl.createSaslServer("DIGEST-MD5", protocol,
serverName, null, callbackHandler); return saslServer; }
catch (SaslException e)
{ LOG.error("Zookeeper Quorum member failed to create a SaslServer to interact
with a client during session initiation", e); }
}
{code}
> Add support for SCRAM(SCRAM-SHA-256) mechanisms
> -----------------------------------------------
>
> Key: ZOOKEEPER-4361
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4361
> Project: ZooKeeper
> Issue Type: New Feature
> Reporter: yuezhongtao
> Priority: Major
> Attachments: image-2021-08-30-20-11-14-254.png
>
>
> Salted Challenge Response Authentication Mechanism (SCRAM) provides secure
> authentication and is increasingly being adopted as an alternative to
> Digest-MD5 which is now obsolete. SCRAM is described in the RFC
> [https://tools.ietf.org/html/rfc5802]. It will be good to add support for
> SCRAM-SHA-256 ([https://tools.ietf.org/html/rfc7677]) as a SASL mechanism for
> zookeeper.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
