概述
3.4.0+以上版本支持启用认证,认证方式有Kerberos 和 DIGEST-MD5 ,本次介绍配置DIGEST-MD5认证
环境准备
单机环境部署伪集群
部署路径
/opt/software/zookeeper-1/
/opt/software/zookeeper-2/
/opt/software/zookeeper-3/
修改配置
Instance1
Zoo.cfg
=======
# The number of milliseconds of each tick
tickTime=2000
# The number of ticks that the initial
# synchronization phase can take
initLimit=10
# The number of ticks that can pass between
# sending a request and getting an acknowledgement
syncLimit=5
# the directory where the snapshot is stored.
# do not use /tmp for storage, /tmp here is just
# example sakes.
dataDir=/opt/software/zookeeper-1/data
dataLogDir=/opt/logs/software/zookeeper-1/logs
# the port at which the clients will connect
clientPort=2182
server.1=zk-01:2887:3887
server.2=zk-02:2888:3888
server.3=zk-03:2889:3889
quorum.auth.enableSasl=true
quorum.auth.learnerRequireSasl=true
quorum.auth.serverRequireSasl=true
quorum.auth.learner.saslLoginContext=QuorumLearner
quorum.auth.server.saslLoginContext=QuorumServer
#quorum.auth.kerberos.servicePrincipal=servicename/_HOST