[ 
https://issues.apache.org/jira/browse/HBASE-13770?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14745501#comment-14745501
 ] 

Maddineni Sukumar commented on HBASE-13770:
-------------------------------------------

Sorry for delayed response [~apurtell]   

The problem is in code itself. 

Actual problem is, in ZKUtil.login() while checking whether the setup is 
secured or not(in ZKUtil.isSecureZooKeeper() method), the check is always 
returning false due to bug so we are not setting  secured configuration object 
properly so Master and RegionServer are not starting properly.  

in ZKUtil.isSecureZooKeeper() If it is programmatic then "Client"  
AppConfigurationEntry wont exists in default secured config. 
So I modified it to check if  "Client" AppConfigurationEntry exists or 
"programmatic config" exists then return true for isSecure. 
Added patch.

Added a unit test also in TestZookeeprACL where one similar test already 
exists. 

And I have one doubt , maybe not related to this. 
In TestZookeeprACL.java we are testing acl related functionality but all 
tests(except one) are returning true with out testing anything. 
In every test starting we are checking if(!secureZKAvailable) return. 
but secureZKAvailable flag is always false and all tests return in first line 
itself without testing anything. Please check once.

> Programmatic JAAS configuration option for secure zookeeper may be broken
> -------------------------------------------------------------------------
>
>                 Key: HBASE-13770
>                 URL: https://issues.apache.org/jira/browse/HBASE-13770
>             Project: HBase
>          Issue Type: Bug
>    Affects Versions: 2.0.0, 1.0.1, 1.1.0, 0.98.13, 1.2.0
>            Reporter: Andrew Purtell
>            Assignee: Maddineni Sukumar
>             Fix For: 0.98.13
>
>         Attachments: HBASE-13770-v1.patch
>
>
> While verifying the patch fix for HBASE-13768 we were unable to successfully 
> test the programmatic JAAS configuration option for secure ZooKeeper 
> integration. Unclear if that was due to a bug or incorrect test configuration.
> Update the security section of the online book with clear instructions for 
> setting up the programmatic JAAS configuration option for secure ZooKeeper 
> integration.
> Verify it works.
> Fix as necessary.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to