Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id E21DA200C41 for ; Fri, 24 Mar 2017 17:28:10 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id E0952160B93; Fri, 24 Mar 2017 16:28:10 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 33C1C160B82 for ; Fri, 24 Mar 2017 17:28:10 +0100 (CET) Received: (qmail 98488 invoked by uid 500); 24 Mar 2017 16:28:09 -0000 Mailing-List: contact issues-help@flink.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@flink.apache.org Delivered-To: mailing list issues@flink.apache.org Received: (qmail 98479 invoked by uid 99); 24 Mar 2017 16:28:09 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 24 Mar 2017 16:28:09 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 0F5C2C147E for ; Fri, 24 Mar 2017 16:28:09 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -4.02 X-Spam-Level: X-Spam-Status: No, score=-4.02 tagged_above=-999 required=6.31 tests=[KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id c03PWWO8c4tD for ; Fri, 24 Mar 2017 16:28:08 +0000 (UTC) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with SMTP id 6A9CA5FC9C for ; Fri, 24 Mar 2017 16:28:07 +0000 (UTC) Received: (qmail 98412 invoked by uid 99); 24 Mar 2017 16:28:06 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 24 Mar 2017 16:28:06 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id 0C32DDFF0F; Fri, 24 Mar 2017 16:28:06 +0000 (UTC) From: EronWright To: issues@flink.incubator.apache.org Reply-To: issues@flink.incubator.apache.org References: In-Reply-To: Subject: [GitHub] flink issue #3600: [FLINK-6117]Make setting of 'zookeeper.sasl.disable' work... Content-Type: text/plain Message-Id: <20170324162806.0C32DDFF0F@git1-us-west.apache.org> Date: Fri, 24 Mar 2017 16:28:06 +0000 (UTC) archived-at: Fri, 24 Mar 2017 16:28:11 -0000 Github user EronWright commented on the issue: https://github.com/apache/flink/pull/3600 To recap, when the ZK server is configured to use SASL, the client is challenged accordingly. The client checks for a login entry in the JAAS config to obtain a kerberos credential, and issues a warning if one isn't found. SASL may be explicitly disabled on the client using the system property `zookeeper.sasl.clientconfig`. Flink provides a configuration setting with which to disable SASL on the client, which causes the system property to be set. _I cannot think of why the default value would be 'true'._ The behavior of 1.2.0 is that the default is 'false' (because it effectively wasn't implemented). Maybe the default should remain 'false'? --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastructure@apache.org or file a JIRA ticket with INFRA. ---