[
https://issues.apache.org/jira/browse/ZOOKEEPER-1437?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15152142#comment-15152142
]
Devendra Vishwakarma commented on ZOOKEEPER-1437:
-------------------------------------------------
Thanks Eugene, For the suspected problem. Could you please tell me what should
I change in terms of kerberos related properties to make it work. Here are the
list of some those property for the reference which is configured for Hbase -
hbase.zookeeper.quorum--> dev.machine.com,dev2machine.com
hbase.master.kerberos.principal--> hbase/[email protected]
hbase.master.keytab.file--> /etc/security/keytabs/hbase.service.keytab
hbase.regionserver.kerberos.principal--> hbase/[email protected]
hbase.regionserver.keytab.file--> /etc/security/keytabs/hbase.service.keytab
zookeeper.znode.parent--> /hbase-secure
hbase.replication--> true
hbase.rest.authentication.kerberos.keytab-->
/etc/security/keytabs/hbase.service.keytab
hbase.rest.authentication.kerberos.principal--> HTTP/[email protected]
hbase.rest.authentication.type--> kerberos
hbase.rest.kerberos.principal--> hbase/[email protected]
hbase.rest.keytab.file--> /etc/security/keytabs/hbase.service.keytab
> Client uses session before SASL authentication complete
> -------------------------------------------------------
>
> Key: ZOOKEEPER-1437
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1437
> Project: ZooKeeper
> Issue Type: Bug
> Components: java client
> Affects Versions: 3.4.3
> Reporter: Thomas Weise
> Assignee: Eugene Koontz
> Fix For: 3.4.4, 3.5.0
>
> Attachments: ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch,
> ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch,
> ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch,
> ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch,
> ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch,
> ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch, ZOOKEEPER-1437.patch,
> getXidCallHierarchy.png
>
>
> Found issue in the context of hbase region server startup, but can be
> reproduced w/ zkCli alone.
> getData may occur prior to SaslAuthenticated and fail with NoAuth. This is
> not expected behavior when the client is configured to use SASL.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
