Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@zookeeper.apache.org
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
Subject: Re: SASL issue with Zookeeper cluster
From: Flavio Junqueira <fpj@apache.org>
In-Reply-To: <982249125.2016061.1445255771866.JavaMail.yahoo@mail.yahoo.com>
Date: Mon, 19 Oct 2015 18:53:29 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <9597007F-ED5A-45F9-AAB7-135AD97F2BF3@apache.org>
References: <46D48CC7-D298-40F7-9CB2-D7E12353577A@apache.org>
 <982249125.2016061.1445255771866.JavaMail.yahoo@mail.yahoo.com>
To: user@zookeeper.apache.org,
 sagar shukla <sa_shukla@yahoo.com>

Cool!

-Flavio

> On 19 Oct 2015, at 12:56, sagar shukla <sa_shukla@yahoo.com.INVALID> =
wrote:
>=20
> Hi Flavio,
> Setting up that parameter while executing MapReduce job helped get it =
working without any issues. Thanks for your prompt responses :)
>=20
> Regards,Sagar
>=20
>=20
>=20
>     On Monday, October 19, 2015 2:59 PM, Flavio Junqueira =
<fpj@apache.org> wrote:
>=20
>=20
> All I'm saying is that if the zk client finds the system property set, =
it will think that you want to authenticate. You could also try setting =
zookeeper.sasl.client to false.
> -Flavio
>=20
> On 19 Oct 2015, at 10:16, sagar shukla <sa_shukla@yahoo.com> wrote:
> Thanks for the prompt response. Since i am running MapReduce on hadoop =
node, i feel i should use default jaas file, else my MapReduce auth =
might break ... right?
> Exception indicates issue at zookeeper side.
> I tried with non-secure hadoop cluster which works as expected.
> Regards,Sagar
>=20
> Sent from Yahoo Mail on Android=20
>=20
> On Mon, 19 Oct, 2015 at 2:33 pm, Flavio Junqueira<fpj@apache.org> =
wrote:  Do you have the jaas config property set which is causing your =
client to believe you want to authenticate? You may also want to ask =
that same question on the Kafka list.
>=20
> -Flavio
>=20
>> On 19 Oct 2015, at 09:56, sagar shukla <sa_shukla@yahoo.com.INVALID> =
wrote:
>>=20
>> Hi All,
>> I have a zookeeper cluster configured with Kafka without any SASL =
security configuration. Also I have a hadoop cluster configured with =
security which uses a different zookeeper cluster. So overall, I have =
two zookeeper clusters - one with security and one without security.
>>=20
>> Now when I try to run a mapreduce program to fetch data from Kafka =
using non-secure zookeeper, I get following error message of SASL though =
my read zookeeper cluster does not have security configured.
>> : org.I0Itec.zkclient.exception.ZkException: =
org.apache.zookeeper.KeeperException$AuthFailedException: =
KeeperErrorCode =3D AuthFailed for =
/consumers/myGroup/ids/myGroup_server-1445242267846-420b8826
>>         at =
org.I0Itec.zkclient.exception.ZkException.create(ZkException.java:68)
>>         at =
org.I0Itec.zkclient.ZkClient.retryUntilConnected(ZkClient.java:685)
>>         at org.I0Itec.zkclient.ZkClient.create(ZkClient.java:304)
>>         at =
org.I0Itec.zkclient.ZkClient.createEphemeral(ZkClient.java:328)
>>         at =
kafka.utils.ZkUtils$.createEphemeralPath(ZkUtils.scala:222)
>>         at =
kafka.utils.ZkUtils$.createEphemeralPathExpectConflict(ZkUtils.scala:237)
>>         at =
kafka.utils.ZkUtils$.createEphemeralPathExpectConflictHandleZKBug(ZkUtils.=
scala:275)
>>         at =
kafka.consumer.ZookeeperConsumerConnector.kafka$consumer$ZookeeperConsumer=
Connector$$registerConsumerInZK(ZookeeperConsumerConnector.scala:254)
>>         at =
kafka.consumer.ZookeeperConsumerConnector.consume(ZookeeperConsumerConnect=
or.scala:239)
>>         at =
kafka.consumer.ZookeeperConsumerConnector.createMessageStreams(ZookeeperCo=
nsumerConnector.scala:153)
>>         at =
org.apache.spark.streaming.kafka.KafkaReceiver.onStart(KafkaInputDStream.s=
cala:111)
>>         at =
org.apache.spark.streaming.receiver.ReceiverSupervisor.startReceiver(Recei=
verSupervisor.scala:125)
>>         at =
org.apache.spark.streaming.receiver.ReceiverSupervisor.start(ReceiverSuper=
visor.scala:109)
>>         at =
org.apache.spark.streaming.scheduler.ReceiverTracker$ReceiverLauncher$$ano=
nfun$8.apply(ReceiverTracker.scala:308)
>>         at =
org.apache.spark.streaming.scheduler.ReceiverTracker$ReceiverLauncher$$ano=
nfun$8.apply(ReceiverTracker.scala:300)
>>         at =
org.apache.spark.SparkContext$$anonfun$runJob$5.apply(SparkContext.scala:1=
767)
>>         at =
org.apache.spark.SparkContext$$anonfun$runJob$5.apply(SparkContext.scala:1=
767)
>>         at =
org.apache.spark.scheduler.ResultTask.runTask(ResultTask.scala:63)
>>         at org.apache.spark.scheduler.Task.run(Task.scala:70)
>>         at =
org.apache.spark.executor.Executor$TaskRunner.run(Executor.scala:213)
>>         at =
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:=
1145)
>>         at =
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java=
:615)
>>         at java.lang.Thread.run(Thread.java:745)
>> Caused by: org.apache.zookeeper.KeeperException$AuthFailedException: =
KeeperErrorCode =3D AuthFailed for =
/consumers/myGroup/ids/myGroup_server-1445242267846-420b8826
>>         at =
org.apache.zookeeper.KeeperException.create(KeeperException.java:123)
>>         at =
org.apache.zookeeper.KeeperException.create(KeeperException.java:51)
>>         at org.apache.zookeeper.ZooKeeper.create(ZooKeeper.java:783)
>>         at =
org.I0Itec.zkclient.ZkConnection.create(ZkConnection.java:87)
>>         at org.I0Itec.zkclient.ZkClient$1.call(ZkClient.java:308)
>>         at org.I0Itec.zkclient.ZkClient$1.call(ZkClient.java:304)
>>         at =
org.I0Itec.zkclient.ZkClient.retryUntilConnected(ZkClient.java:675)
>>         ... 21 more
>>=20
>> I did try setting up parameter -Djava.security.auth.login.config=3Dnone=
 while trying to run the mapreduce program.
>>=20
>> Any thoughts on how I can get rid of this security warning?
>> Regards,Sagar
>>=20
>=20
>=20
>=20
>=20
>=20