Return-Path: X-Original-To: apmail-zookeeper-dev-archive@www.apache.org Delivered-To: apmail-zookeeper-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 67FFA10D56 for ; Wed, 25 Sep 2013 17:06:18 +0000 (UTC) Received: (qmail 39627 invoked by uid 500); 25 Sep 2013 17:06:08 -0000 Delivered-To: apmail-zookeeper-dev-archive@zookeeper.apache.org Received: (qmail 39521 invoked by uid 500); 25 Sep 2013 17:06:05 -0000 Mailing-List: contact dev-help@zookeeper.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@zookeeper.apache.org Delivered-To: mailing list dev@zookeeper.apache.org Received: (qmail 39434 invoked by uid 99); 25 Sep 2013 17:06:03 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 25 Sep 2013 17:06:03 +0000 Date: Wed, 25 Sep 2013 17:06:03 +0000 (UTC) From: "Kuba Skopal (JIRA)" To: dev@zookeeper.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (ZOOKEEPER-1764) ZooKeeper attempts at SASL eventhough it shouldn't MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/ZOOKEEPER-1764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13777752#comment-13777752 ] Kuba Skopal commented on ZOOKEEPER-1764: ---------------------------------------- That satisfies my case perfectly, thanks! Long term I'd say having a property on zoo object would be better though as that would make it easily configurable from Spring, etc... > ZooKeeper attempts at SASL eventhough it shouldn't > -------------------------------------------------- > > Key: ZOOKEEPER-1764 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1764 > Project: ZooKeeper > Issue Type: Bug > Components: java client > Affects Versions: 3.4.4 > Reporter: Kuba Skopal > > We are using a proprietary SASL solution, but we don't want to use it with ZooKeeper. Unfortunately it seems, that there is no way to disable SASL for ZooKeeper as the code only checks for presence of "java.security.auth.login.config" system property to determine whether SASL should be used or not. > For us it means, that ZooKeeper client just shuts down after SASL is initialized. What happens: > 1) System.getProperty("java.security.auth.login.config") is initially null > 2) ZooKeeper is initialized and used > 3) Our JAAS/SASL component is initialized > 4) System.getProperty("java.security.auth.login.config") is not null anymore > 5) ZooKeeperSaslClient.clientTunneledAuthenticationInProgress() suddenly picks up the new property and starts returning true > 6) ClientCnxnSocketNIO.findSendablePacket() suddenly stops returning any packets since clientTunneledAuthenticationInProgress is always true > The communication is halted and eventually times out. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira