Re: SSL and Zookeeper

2017-10-31 Thread Yolanda Davis
Hi Mark, Just adding to what Andy said below. Currently there is support for Kerberos/SASL authentication with Zookeeper. The admin guide provides details on that configuration and setup for embedded zookeeper and links for guidance on external Zookeeper installations.

Re: SSL and Zookeeper

2017-10-31 Thread Andy LoPresto
Hi Mark, I believe SSL ZK connections are only supported in 3.5.0+ [1] and currently NiFi uses ZK 3.4.6 [2]. I don’t know the details on making a TLS connection to ZK, but my first thoughts would be to update the host/port combination in your NiFi configs to reference the ZK HTTPS port, and

SSL and Zookeeper

2017-10-31 Thread Mark Bean
Has anyone setup zookeeper connections for a NiFi Cluster over SSL? We have ZK itself running over SSL. How do we get the NiFi to ZK connections secure? Is this possible? Advice, suggestions and/or documentation greatly appreciated. Thanks, Mark