Re: Re: Using ACLs without Kerberos

2017-09-08 Thread Manoj Murumkar
This is fixed as well, btw. My ZK config wasn't done properly. On Tue, Sep 5, 2017 at 11:08 PM, Manoj Murumkar wrote: > Thanks, SASL setup for ZK does the trick. > > Now, I am continuing the security setup with schema registry. I am > configuring it to use same PLAINTEXT method for now. > > list

Re: Re: Using ACLs without Kerberos

2017-09-05 Thread Manoj Murumkar
Thanks, SASL setup for ZK does the trick. Now, I am continuing the security setup with schema registry. I am configuring it to use same PLAINTEXT method for now. listeners=http://0.0.0.0:8081 kafkastore.connection.url=localhost:2181 kafkastore.topic=_schemas debug=true # Security specific params

RE: Re: Using ACLs without Kerberos

2017-08-31 Thread Shrikant Patel
Yes, as per my understanding for now the only way to secure ZK is SASL. https://issues.apache.org/jira/browse/ZOOKEEPER-2125 once released ZK could also be secured using SSL. Also remember not use any OS user, anyone user on n\w who can connect to ZK host:port will be able to modify the ACLs.