hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Maddineni Sukumar (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-13770) Programmatic JAAS configuration option for secure zookeeper may be broken
Date Tue, 15 Sep 2015 14:02:46 GMT

    [ https://issues.apache.org/jira/browse/HBASE-13770?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14745501#comment-14745501
] 

Maddineni Sukumar commented on HBASE-13770:
-------------------------------------------

Sorry for delayed response [~apurtell]   

The problem is in code itself. 

Actual problem is, in ZKUtil.login() while checking whether the setup is secured or not(in
ZKUtil.isSecureZooKeeper() method), the check is always returning false due to bug so we are
not setting  secured configuration object properly so Master and RegionServer are not starting
properly.  

in ZKUtil.isSecureZooKeeper() If it is programmatic then "Client"  AppConfigurationEntry wont
exists in default secured config. 
So I modified it to check if  "Client" AppConfigurationEntry exists or "programmatic config"
exists then return true for isSecure. 
Added patch.

Added a unit test also in TestZookeeprACL where one similar test already exists. 

And I have one doubt , maybe not related to this. 
In TestZookeeprACL.java we are testing acl related functionality but all tests(except one)
are returning true with out testing anything. 
In every test starting we are checking if(!secureZKAvailable) return. 
but secureZKAvailable flag is always false and all tests return in first line itself without
testing anything. Please check once.

> Programmatic JAAS configuration option for secure zookeeper may be broken
> -------------------------------------------------------------------------
>
>                 Key: HBASE-13770
>                 URL: https://issues.apache.org/jira/browse/HBASE-13770
>             Project: HBase
>          Issue Type: Bug
>    Affects Versions: 2.0.0, 1.0.1, 1.1.0, 0.98.13, 1.2.0
>            Reporter: Andrew Purtell
>            Assignee: Maddineni Sukumar
>             Fix For: 0.98.13
>
>         Attachments: HBASE-13770-v1.patch
>
>
> While verifying the patch fix for HBASE-13768 we were unable to successfully test the
programmatic JAAS configuration option for secure ZooKeeper integration. Unclear if that was
due to a bug or incorrect test configuration.
> Update the security section of the online book with clear instructions for setting up
the programmatic JAAS configuration option for secure ZooKeeper integration.
> Verify it works.
> Fix as necessary.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message