thevar1able/ClickHouse
1
0
Fork 0
mirror of https://github.com/ClickHouse/ClickHouse.git synced 2024-11-11 18:14:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
90db762c87
ClickHouse/tests/integration/test_distributed_inter_server_secret/configs/users.xml

55 lines
1.1 KiB
XML
Raw Normal View History

Secure inter-cluster query execution (with initial_user as current query user) [v3] Add inter-server cluster secret, it is used for Distributed queries inside cluster, you can configure in the configuration file: <remote_servers> <logs> <shard> <secret>foobar</secret> <!-- empty -- works as before --> ... </shard> </logs> </remote_servers> And this will allow clickhouse to make sure that the query was not faked, and was issued from the node that knows the secret. And since trust appeared it can use initial_user for query execution, this will apply correct *_for_user (since with inter-server secret enabled, the query will be executed from the same user on the shards as on initator, unlike "default" user w/o it). v2: Change user to the initial_user for Distributed queries if secret match v3: Add Protocol::Cluster package v4: Drop Protocol::Cluster and use plain Protocol::Hello + user marker v5: Do not use user from Hello for cluster-secure (superfluous)
2020-09-14 21:55:43 +00:00
<?xml version="1.0"?>
Change <yandex> to <clickhouse> in configs
2021-09-19 22:38:53 +00:00
<clickhouse>
Secure inter-cluster query execution (with initial_user as current query user) [v3] Add inter-server cluster secret, it is used for Distributed queries inside cluster, you can configure in the configuration file: <remote_servers> <logs> <shard> <secret>foobar</secret> <!-- empty -- works as before --> ... </shard> </logs> </remote_servers> And this will allow clickhouse to make sure that the query was not faked, and was issued from the node that knows the secret. And since trust appeared it can use initial_user for query execution, this will apply correct *_for_user (since with inter-server secret enabled, the query will be executed from the same user on the shards as on initator, unlike "default" user w/o it). v2: Change user to the initial_user for Distributed queries if secret match v3: Add Protocol::Cluster package v4: Drop Protocol::Cluster and use plain Protocol::Hello + user marker v5: Do not use user from Hello for cluster-secure (superfluous)
2020-09-14 21:55:43 +00:00
<profiles>
<default>
</default>
Add a test for INSERT w/o user in interserver mode v2: ensure that the test fails with the version w/o fix v3: force connect by modifying config and reload it v4: add comments
2021-09-27 20:35:54 +00:00
<ro>
<readonly>1</readonly>
</ro>
Secure inter-cluster query execution (with initial_user as current query user) [v3] Add inter-server cluster secret, it is used for Distributed queries inside cluster, you can configure in the configuration file: <remote_servers> <logs> <shard> <secret>foobar</secret> <!-- empty -- works as before --> ... </shard> </logs> </remote_servers> And this will allow clickhouse to make sure that the query was not faked, and was issued from the node that knows the secret. And since trust appeared it can use initial_user for query execution, this will apply correct *_for_user (since with inter-server secret enabled, the query will be executed from the same user on the shards as on initator, unlike "default" user w/o it). v2: Change user to the initial_user for Distributed queries if secret match v3: Add Protocol::Cluster package v4: Drop Protocol::Cluster and use plain Protocol::Hello + user marker v5: Do not use user from Hello for cluster-secure (superfluous)
2020-09-14 21:55:43 +00:00
</profiles>
<users>
<default>
<password></password>
<networks>
<ip>::/0</ip>
</networks>
<profile>default</profile>
<quota>default</quota>
</default>
<nopass>
<password></password>
<networks>
<ip>::/0</ip>
</networks>
<profile>default</profile>
<quota>default</quota>
</nopass>
<pass>
<password>foo</password>
<networks>
<ip>::/0</ip>
</networks>
<profile>default</profile>
<quota>default</quota>
</pass>
Add a test for INSERT w/o user in interserver mode v2: ensure that the test fails with the version w/o fix v3: force connect by modifying config and reload it v4: add comments
2021-09-27 20:35:54 +00:00
<ro>
<password></password>
<networks>
<ip>::/0</ip>
</networks>
<profile>ro</profile>
<quota>default</quota>
</ro>
Secure inter-cluster query execution (with initial_user as current query user) [v3] Add inter-server cluster secret, it is used for Distributed queries inside cluster, you can configure in the configuration file: <remote_servers> <logs> <shard> <secret>foobar</secret> <!-- empty -- works as before --> ... </shard> </logs> </remote_servers> And this will allow clickhouse to make sure that the query was not faked, and was issued from the node that knows the secret. And since trust appeared it can use initial_user for query execution, this will apply correct *_for_user (since with inter-server secret enabled, the query will be executed from the same user on the shards as on initator, unlike "default" user w/o it). v2: Change user to the initial_user for Distributed queries if secret match v3: Add Protocol::Cluster package v4: Drop Protocol::Cluster and use plain Protocol::Hello + user marker v5: Do not use user from Hello for cluster-secure (superfluous)
2020-09-14 21:55:43 +00:00
</users>
<quotas>
<default>
</default>
</quotas>
Change <yandex> to <clickhouse> in configs
2021-09-19 22:38:53 +00:00
</clickhouse>
Reference in New Issue Copy Permalink