dubbo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From GitBox <...@apache.org>
Subject [GitHub] coolspring1293 opened a new issue #1179: How to use ACL authorisation mechanism of Zookeeper on dubbo
Date Thu, 03 May 2018 08:12:20 GMT
coolspring1293 opened a new issue #1179: How to use ACL authorisation mechanism of Zookeeper
on dubbo
URL: https://github.com/apache/incubator-dubbo/issues/1179
 
 
   - For servers exposed on the public network, using registry centre of `zookeeper` without
fitters, it exists the security issues that `zookeeper` can be registered by any sever. 
   - Actually, third party agency also discovered the vulnerability via IP and port scanning.
Using `iptable` can not be approved.  
   - ACL authorisation mechanism of `zookeeper` (username: passwd) can deal with it, but I
have no idea about how to use it on `dubbo`.
   - I have searched on Google and tried it (read source code and tried to make it), I got
nothing useful and did not complete it. How can I deal with this issue by username and password?
Thx~
   
   ***
   
   - References:
   
     * [掃文資訊:分佈式服務Dubbo+Zookeeper安全認證](https://hk.saowen.com/a/b6faf5cac136f036726aef3dae5608eb1c90d5b201916cdeec7a7897f50ed07a)
     * [知乎:Zookeeper+dubbo,怎么设置安全认证?](https://www.zhihu.com/question/45720203/answer/140188334)
     

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org


Mime
View raw message