[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2585?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15508831#comment-15508831
 ] 

Rakesh Kumar Singh commented on ZOOKEEPER-2585:
-----------------------------------------------

[~arshad.mohammad] As i mentioned earlier also, pls try to understand the 
problem before making conclusion. If any clarity required can be discussed or 
can be followed the steps mentioned in the issue to understand the problem. In 
this issue pls try to perform the steps mentioned here in 2 case- one when 
zookeeper started in ssl mode and another when zookeeper started in non-ssl 
mode and will get the difference.

> ACL with SSL is not working
> ---------------------------
>
>                 Key: ZOOKEEPER-2585
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2585
>             Project: ZooKeeper
>          Issue Type: Bug
>          Components: server
>    Affects Versions: 3.5.1
>            Reporter: Rakesh Kumar Singh
>            Priority: Critical
>
> Set ACL with SSL is not working
> Steps to reproduce:-
> 1. Start zookeeper in ssl mode in standalone
> 2. Connect zookeeper from zookeeper client (using zkCli.sh)
> 3. add auth and set ACL as below and then quit the client :-
> [zk: localhost:2181(CONNECTED) 0] addauth digest u1:p1
> [zk: localhost:2181(CONNECTED) 1] create /test_auth hello
> Created /test_auth
> [zk: localhost:2181(CONNECTED) 2] setAcl /test_auth auth:u1:p1:crdwa
> [zk: localhost:2181(CONNECTED) 3] get /test_auth
> hello
> [zk: localhost:2181(CONNECTED) 4] quit
> 4. Connect again zookeeper from zookeeper client (using zkCli.sh)
> 5. Try to access the znode, try to set the data and so on, everything is 
> allowed
> [zk: localhost:2181(CONNECTED) 2] set /test_auth hello1
> [zk: localhost:2181(CONNECTED) 3] get /test_auth
> hello1
> [zk: localhost:2181(CONNECTED) 1] getAcl /test_auth
> 'x509,'CN=locahost%2COU=CS%2CO=HUAWEI%2CL=Shenzhen%2CST=Guangdong%2CC=CHINA
> : cdrwa
> 'digest,'u1:fpT/y03U+EjItKZOSLGvjnJlyng=
> : cdrwa



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to