Thank you Norbert!, i was not sure if we need one or not, it may be good to capture that in doc as pre requisites? i know lot of people know that but it may help people like me.
Ram On Mon, Sep 24, 2018 at 10:45 AM Norbert Kalmar <nkal...@cloudera.com.invalid> wrote: > Hi Ram, > > Yes, you will need a Kerberos instance, ZooKeeper doesn't have it bundled ( > I don't think it's even possible especially in terms of security reasons). > Then you will have to configure SASL in ZooKeeper, as an additional layer > over Kerberos. > > I'd say Kerberos is more secure, as for example you don't have your > password stored. But it is more complex to setup and you require a 3rd > party Kerberos instance. Lot of tutorial on it though. Like for example: > https://blog.bluesoftglobal.com/3-steps-to-apache-zookeeper-authentication/ > https://github.com/ekoontz/zookeeper/wiki > > At the end, I think it comes down to preference. > > Regards, > Norbert > > On Sat, Sep 22, 2018 at 1:40 PM rammohan ganapavarapu < > rammohanga...@gmail.com> wrote: > > > Hi, > > > > To configure "Kerberos based authentication" on zookeeper server-server > or > > client-server do we need to install any additional packages? do we need > to > > setup kerberos server? or zookeeper embedded the kerberos server? and > what > > is the recommended authentication mechanism, kerberos or digest-md5? > > > > Thanks, > > Ram > > >
