During leader activation(leader-election) phase, all the servers in an ensemble will participate to form quorum. By default, this communication is not authenticated. This guide describes how to enable secure communication between the quorum peer servers using SASL mechanism. ZooKeeper supports Kerberos or DIGEST-MD5 as your authentication scheme.

JIRA and Source Code

Presently, this feature is supported only in ZooKeeper 3.4.10+ versionand . This is implemented using JIRA JIRA issue ZOOKEEPER-1045. The , and the patch is available linked from that JIRA. The feature code will be forward ported to ZooKeeper 3.5.x and 3.6.x versions in a separate versions via separate JIRA task ZOOKEEPER-2639.

ZooKeeper SASL configurations

...

Following configurations should be added in $conf/zoo.cfg configuration file.

...