ninsmiracle commented on issue #2114:
URL: 
https://github.com/apache/incubator-pegasus/issues/2114#issuecomment-2345215271

     I also tried the following. When I changed the principal used by the 
pegasus-shell to be consistent with the server, I found that the pegasus-shell 
could not connect to the cluster at all. When you enter the `ls` command, the 
pegasus-shell will return an `ERR_TIMEOUT`. I checked the information from 
internet and it shows that when sasl calls kerberos, both ends of sasl cannot 
be set to the same principal.
   
     So I was confused. If this is the case, different nodes in the cluster 
must use the same principal, because we cannot assign a principal to each node. 
In this way, internal verification will definitely fail.
   
     At the same time, I noticed that `mandatory_auth = false` was developed in 
the code, and it seems that the internal verification between nodes can be 
skipped from the code logic. But I don’t know why it didn’t work.
   There is too little log information in various places, and the only error 
`ERR_UNKNOW` report is not very usefull, so my work is in trouble...


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to