[PHOENIX-4085] SASL Authentication support for connecting to a ZooKeeper Quorum from PQS and Load Balancer

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Rahul Shrivastava
• Created: 14/Aug/17 19:30
• Updated: 14/Aug/17 19:34

Description

PQS server registers to zookeeper. Load balancer connects to zookeeper to get list of PQS server already registered to zookeeper. Currently the way things are wired up as follows

1. The LB and PQS uses digest to authenticate with ZK. The username and password is set in hbase-site.xml as
"phoenix.queryserver.zookeeper.acl.username" - default is "phoenix"
""phoenix.queryserver.zookeeper.acl.password" - ddefault is "phoenix"
The permission on the znode (pqs) is set to read permission .

While this is ok to start, but we need support connecting to a ZooKeeper Quorum that supports SASL authentication.

https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL

Issue Links

• relates to: PHOENIX-3654 Client-side PQS discovery for thin client