[OOZIE-1491] Make sure HA works with a secure ZooKeeper

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: trunk
• Fix Version/s: 4.1.0
• Component/s: HA
• Assignee: Robert Kanter
• Reporter: Robert Kanter
• Created: 09/Aug/13 21:17
• Updated: 09/Dec/14 00:45
• Resolved: 03/Dec/13 01:43

Description

We need to make sure that HA works with a secure ZooKeeper. This includes the SASL ACL setting that will prevent someone else from deleting the oozie znodes.

Issue Links

• depends upon: CURATOR-58 ACLs support for ZKPaths.mkdirs()
• depends upon: HADOOP-10100 MiniKDC shouldn't use apacheds-all artifact
• is related to: OOZIE-615 Support high availability for the Oozie service
• is related to: OOZIE-1460 Implement and Document security for HA
• relates to: OOZIE-1608 Update Curator to 2.4.0 when its available to fix security hole