Uploaded image for project: 'ZooKeeper'
  1. ZooKeeper
  2. ZOOKEEPER-1045

Support Quorum Peer mutual authentication via SASL

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Critical
    • Resolution: Fixed
    • None
    • 3.4.10
    • quorum, security
    • None
    • Reviewed

    Description

      ZOOKEEPER-938 addresses mutual authentication between clients and servers. This bug, on the other hand, is for authentication among quorum peers. Hopefully much of the work done on SASL integration with Zookeeper for ZOOKEEPER-938 can be used as a foundation for this enhancement.

      Review board: https://reviews.apache.org/r/47354/

      Attachments

        1. 0001-ZOOKEEPER-1045-br-3-4.patch
          227 kB
          Rakesh Radhakrishnan
        2. 1045_failing_phunt.tar.gz
          10 kB
          Patrick D. Hunt
        3. HOST_RESOLVER-ZK-1045.patch
          9 kB
          Rakesh Radhakrishnan
        4. org.apache.zookeeper.server.quorum.auth.QuorumAuthUpgradeTest.testRollingUpgrade.log
          537 kB
          Michael Han
        5. QuorumPeer Mutual Authentication Via Sasl Feature Doc - 2016-Nov-10.pdf
          936 kB
          Rakesh Radhakrishnan
        6. QuorumPeer Mutual Authentication Via Sasl Feature Doc - 2016-Nov-25.pdf
          914 kB
          Rakesh Radhakrishnan
        7. QuorumPeer Mutual Authentication Via Sasl Feature Doc - 2016-Nov-29.pdf
          919 kB
          Rakesh Radhakrishnan
        8. QuorumPeer Mutual Authentication Via Sasl Feature Doc - 2016-Nov-30.pdf
          923 kB
          Rakesh Radhakrishnan
        9. QuorumPeer Mutual Authentication Via Sasl Feature Doc - 2016-Sep-25.pdf
          806 kB
          Rakesh Radhakrishnan
        10. TEST-org.apache.zookeeper.server.quorum.auth.QuorumAuthUpgradeTest.txt
          328 kB
          Michael Han
        11. ZK-1045-test-case-failure-logs.zip
          12 kB
          Rakesh Radhakrishnan
        12. ZOOKEEPER-1045-00.patch
          141 kB
          Rakesh Radhakrishnan
        13. ZOOKEEPER-1045-br-3-4.patch
          274 kB
          Rakesh Radhakrishnan
        14. ZOOKEEPER-1045-br-3-4.patch
          274 kB
          Rakesh Radhakrishnan
        15. ZOOKEEPER-1045-br-3-4.patch
          272 kB
          Rakesh Radhakrishnan
        16. ZOOKEEPER-1045-br-3-4.patch
          272 kB
          Rakesh Radhakrishnan
        17. ZOOKEEPER-1045-br-3-4.patch
          276 kB
          Rakesh Radhakrishnan
        18. ZOOKEEPER-1045-br-3-4.patch
          267 kB
          Rakesh Radhakrishnan
        19. ZOOKEEPER-1045-br-3-4.patch
          262 kB
          Rakesh Radhakrishnan
        20. ZOOKEEPER-1045-br-3-4.patch
          262 kB
          Rakesh Radhakrishnan
        21. ZOOKEEPER-1045-br-3-4.patch
          256 kB
          Rakesh Radhakrishnan
        22. ZOOKEEPER-1045-br-3-4.patch
          228 kB
          Rakesh Radhakrishnan
        23. ZOOKEEPER-1045-br-3-4.patch
          226 kB
          Rakesh Radhakrishnan
        24. ZOOKEEPER-1045-br-3-4.patch
          226 kB
          Rakesh Radhakrishnan
        25. ZOOKEEPER-1045-br-3-4.patch
          224 kB
          Rakesh Radhakrishnan
        26. ZOOKEEPER-1045-br-3-4.patch
          227 kB
          Rakesh Radhakrishnan
        27. ZOOKEEPER-1045-Rolling Upgrade Design Proposal.pdf
          510 kB
          Rakesh Radhakrishnan
        28. ZOOKEEPER-1045 Test Plan.pdf
          189 kB
          Michael Han
        29. ZOOKEEPER-1045TestValidationDesign.pdf
          148 kB
          Michael Han

        Issue Links

          contains

          Improvement - An improvement or enhancement to an existing feature or task. ZOOKEEPER-2433 ZooKeeperSaslServer: allow user principals in subject

          • Major - Major loss of function.
          • Closed
          is blocked by

          New Feature - A new feature of the product, which has yet to be developed. ZOOKEEPER-938 Support Kerberos authentication of clients.

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. ZOOKEEPER-2759 Flaky test: org.apache.zookeeper.server.quorum.QuorumCnxManagerTest.testNoAuthLearnerConnectToAuthRequiredServerWithHigherSid

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. ZOOKEEPER-2689 Fix Kerberos Authentication related test cases

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. ZOOKEEPER-2712 MiniKdc test case intermittently failing due to principal not found in Kerberos database

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. ZOOKEEPER-107 Allow dynamic changes to server cluster membership

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. ZOOKEEPER-2479 Add 'electionTimeTaken' value in LeaderMXBean and FollowerMXBean

          • Major - Major loss of function.
          • Closed

          Test - A new unit, integration or system test. ZOOKEEPER-2650 Test Improvement by adding more QuorumPeer Auth related test cases

          • Major - Major loss of function.
          • Closed
          relates to

          Task - A task that needs to be done. ZOOKEEPER-2639 Port Quorum Peer mutual authentication SASL feature to branch-3.5 and trunk

          • Critical - Crashes, loss of data, severe memory leak.
          • Open
          links to

          Web Link GitHub Pull Request #147

          Activity

            People

              rakeshr Rakesh Radhakrishnan
              ekoontz Eugene Joseph Koontz
              Votes:
              2 Vote for this issue
              Watchers:
              30 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: