zoukankan      html  css  js  c++  java
  • CDH平台:ZooKeeper 未授权访问【原理扫描】漏洞修复

    修复过程

    cd /opt/cloudera/parcels/CDH/bin
    ./zookeeper-client -server 127.0.0.1:2181
    [zk: 127.0.0.1:2181(CONNECTED) 1] getAcl /
    'world,'anyone
    : cdrwa
    [zk: 127.0.0.1:2181(CONNECTED) 2] get /
    
    cZxid = 0x0
    ctime = Thu Jan 01 08:00:00 CST 1970
    mZxid = 0x0
    mtime = Thu Jan 01 08:00:00 CST 1970
    pZxid = 0x50004a798
    cversion = 1388398
    dataVersion = 0
    aclVersion = 0
    ephemeralOwner = 0x0
    dataLength = 0
    numChildren = 2
    [zk: 127.0.0.1:2181(CONNECTED) 3] ls /
    [hive_zookeeper_namespace_hive, zookeeper]
    [zk: 127.0.0.1:2181(CONNECTED) 4] setAcl / ip:192.168.70.86:cdrwa,ip:192.168.70.87:cdrwa,ip:192.168.70.88:cdrwa,ip:127.0.0.1:cdrwa
     does not have the form scheme:id:perm
    cZxid = 0x0
    ctime = Thu Jan 01 08:00:00 CST 1970
    mZxid = 0x0
    mtime = Thu Jan 01 08:00:00 CST 1970
    pZxid = 0x50004a7a8
    cversion = 1388400
    dataVersion = 0
    aclVersion = 1
    ephemeralOwner = 0x0
    dataLength = 0
    numChildren = 2
    [zk: 127.0.0.1:2181(CONNECTED) 6] ls /
    [hive_zookeeper_namespace_hive, zookeeper, cloudera_manager_zookeeper_canary]
    [zk: 127.0.0.1:2181(CONNECTED) 7] getAcl /
    'ip,'192.168.70.86
    : cdrwa
    'ip,'192.168.70.87
    : cdrwa
    'ip,'192.168.70.88
    : cdrwa
    'ip,'127.0.0.1
    : cdrwa
    
    [zk: 127.0.0.1:2181(CONNECTED) 9] ls /
    [hive_zookeeper_namespace_hive, zookeeper]
    [zk: 127.0.0.1:2181(CONNECTED) 10]
    
  • 相关阅读:
    用户使用情况报告
    项目验收与总结
    Beta阶段冲刺-6
    Beta阶段冲刺-5
    Beta阶段冲刺-4
    Beta阶段冲刺-3
    Beta阶段冲刺-2
    Beta阶段冲刺-1
    『编程题全队』Beata阶段项目复审
    『编程题全队』Beta 阶段用户使用调查报告
  • 原文地址:https://www.cnblogs.com/bugbeta/p/15169076.html
Copyright © 2011-2022 走看看