dubbo+zookeeper开启sasl认证

一.zookeeper服务器

1.zookeeper开启sasl

authProvider.1=org.apache.zookeeper.server.auth.SASLAuthenticationProvider
authProvider.sasl=org.apache.zookeeper.server.auth.SASLAuthenticationProvider
JaasLoginRenew=3600000
sessionRequireClientSASLAuth=true

2.创建zk_server_jaas.conf,zk_client_jaas.conf

Server {
    org.apache.zookeeper.server.auth.DigestLoginModule required
    user_admin="adminpassword"; // 格式：user_用户名="密码"
};

Client {
    org.apache.zookeeper.server.auth.DigestLoginModule required
    username="admin"
    password="adminpassword";
};

3.增加环境变量

export SERVER_JVMFLAGS="-Djava.security.auth.login.config=/path/to/zk_server_jaas.conf"
export CLIENT_JVMFLAGS="-Djava.security.auth.login.config=/path/to/zk_client_jaas.conf"

4.重启 

./bin/zkServer.sh restart

二.java端 ，使用dubbo+curator

1.在resources下创建zk_client_jaas.conf

Client {
    org.apache.zookeeper.server.auth.DigestLoginModule required
    username="admin"
    password="adminpassword";
};

2.application.yml添加配置

dubbo:
    application:
        name: xxxxx
    registry:
        address: zookeeper://ip:porttries
        protocol: zookeeper
        check: false
        timeout: 60000
        session: 30000
    scan: 
        base-packages: com.xxx.xxx
    protocol:
        name: dubbo
        port: xxx
        heartbeat: 30000
    consumer:
        timeout: 60000
        check: false
    provider:
        token: true
        retries: 10

3.启动jar时加入参数配置

-Djava.security.auth.login.config=/path/to/zk_client_jaas.conf