ZooKeeper 未授权访问漏洞处理

修复办法一(推荐)：设置访问IP

 1#### 登录 zookeeper：
 2./zkCli.sh -server 10.1.150.34:2181
 3
 4#### 查看权限：
 5getAcl /
 6getAcl /dubbo
 7getAcl /zookeeper
 8getAcl /zookeeper/quota
 9
10#### 设置权限：
11setAcl /                 ip:10.1.150.34:cdrwa,ip:10.1.150.35:cdrwa,ip:10.1.150.36:cdrwa,ip:10.1.150.37:cdrwa,ip:10.1.241.2:cdrwa,ip:10.1.241.3:cdrwa,ip:10.1.241.4:cdrwa,ip:10.1.241.5:cdrwa
12setAcl /dubbo            ip:10.1.150.34:cdrwa,ip:10.1.150.35:cdrwa,ip:10.1.150.36:cdrwa,ip:10.1.150.37:cdrwa,ip:10.1.241.2:cdrwa,ip:10.1.241.3:cdrwa,ip:10.1.241.4:cdrwa,ip:10.1.241.5:cdrwa
13setAcl /zookeeper        ip:10.1.150.34:cdrwa,ip:10.1.150.35:cdrwa,ip:10.1.150.36:cdrwa,ip:10.1.150.37:cdrwa,ip:10.1.241.2:cdrwa,ip:10.1.241.3:cdrwa,ip:10.1.241.4:cdrwa,ip:10.1.241.5:cdrwa
14setAcl /zookeeper/quota  ip:10.1.150.34:cdrwa,ip:10.1.150.35:cdrwa,ip:10.1.150.36:cdrwa,ip:10.1.150.37:cdrwa,ip:10.1.241.2:cdrwa,ip:10.1.241.3:cdrwa,ip:10.1.241.4:cdrwa,ip:10.1.241.5:cdrwa
15
16#### 取消权限（使用之前设置的IP进行访问）：
17setAcl /                 world:anyone:cdrwa
18setAcl /dubbo            world:anyone:cdrwa
19setAcl /zookeeper        world:anyone:cdrwa
20setAcl /zookeeper/quota  world:anyone:cdrwa

修复办法二（需要修改应用程序）：设置用户及访问权限

 1#### 登录 zookeeper：
 2./zkCli.sh -server 10.1.150.34:2181
 3
 4#### 增加一个认证用户：
 5#### 命令：addauth digest 用户名:密码明文
 6addauth digest jygz:copote1258
 7
 8#### 设置权限(有两种方式设置，注意区别)：
 9#### 命令(明文密码，常用)：setAcl /path auth:用户名:密码明文:权限
10#### 命令(密文密码)：setAcl /path digest:用户名:密码密文:权限
11setAcl /                 auth:jygz:copote1258:cdrwa
12setAcl /zookeeper        auth:jygz:copote1258:cdrwa
13setAcl /zookeeper/config auth:jygz:copote1258:cdrwa
14setAcl /zookeeper/quota  auth:jygz:copote1258:cdrwa
15setAcl /dubbo            auth:jygz:copote1258:cdrwa
16
17#### 查看权限设置：
18#### 命令：getAcl /path 
19getAcl /
20getAcl /zookeeper
21getAcl /zookeeper/config
22getAcl /zookeeper/quota
23getAcl /dubbo