zookeeper 认证_Zookeeper 配置认证之DIGEST-MD5

概述

3.4.0+以上版本支持启用认证，认证方式有Kerberos 和 DIGEST-MD5 ，本次介绍配置DIGEST-MD5认证

环境准备

单机环境部署伪集群

部署路径

/opt/software/zookeeper-1/

/opt/software/zookeeper-2/

/opt/software/zookeeper-3/

修改配置

Instance1

Zoo.cfg

=======

# The number of milliseconds of each tick

tickTime=2000

# The number of ticks that the initial

# synchronization phase can take

initLimit=10

# The number of ticks that can pass between

# sending a request and getting an acknowledgement

syncLimit=5

# the directory where the snapshot is stored.

# do not use /tmp for storage, /tmp here is just

# example sakes.

dataDir=/opt/software/zookeeper-1/data

dataLogDir=/opt/logs/software/zookeeper-1/logs

# the port at which the clients will connect

clientPort=2182

server.1=zk-01:2887:3887

server.2=zk-02:2888:3888

server.3=zk-03:2889:3889

quorum.auth.enableSasl=true

quorum.auth.learnerRequireSasl=true

quorum.auth.serverRequireSasl=true

quorum.auth.learner.saslLoginContext=QuorumLearner

quorum.auth.server.saslLoginContext=QuorumServer

#quorum.auth.kerberos.servicePrincipal=servicename/_HOST