From user-return-12259-archive-asf-public=cust-asf.ponee.io@zookeeper.apache.org Mon Oct 28 16:44:26 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 1BC08180638 for ; Mon, 28 Oct 2019 17:44:26 +0100 (CET) Received: (qmail 37878 invoked by uid 500); 28 Oct 2019 16:44:24 -0000 Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@zookeeper.apache.org Delivered-To: mailing list user@zookeeper.apache.org Received: (qmail 37866 invoked by uid 99); 28 Oct 2019 16:44:24 -0000 Received: from Unknown (HELO mailrelay1-lw-us.apache.org) (10.10.3.42) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 28 Oct 2019 16:44:24 +0000 Received: from [172.30.65.196] (unknown [185.63.45.212]) by mailrelay1-lw-us.apache.org (ASF Mail Server at mailrelay1-lw-us.apache.org) with ESMTPSA id 0BF7F59FA for ; Mon, 28 Oct 2019 16:44:23 +0000 (UTC) From: Andor Molnar Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Kerberos login error: Message stream modified (41) Message-Id: Date: Mon, 28 Oct 2019 17:44:22 +0100 To: user@zookeeper.apache.org X-Mailer: Apple Mail (2.3445.104.11) Hi, I=E2=80=99m facing the following error message when trying to run = ZooKeeper 3.5.5 on Java 11 with Kerberos authentication: 2019-10-28 16:30:04,811 INFO = org.apache.zookeeper.server.ServerCnxnFactory: Using = org.apache.zookeeper.server.NIOServerCnxnFactory as server connection = factory 2019-10-28 16:30:04,823 INFO org.apache.zookeeper.common.X509Util: = Setting -D jdk.tls.rejectClientInitiatedRenegotiation=3Dtrue to disable = client-initiated TLS renegotiation 2019-10-28 16:30:05,012 ERROR = org.apache.zookeeper.server.quorum.QuorumPeerMain: Unexpected exception, = exiting abnormally java.io.IOException: Could not configure server because SASL = configuration did not allow the ZooKeeper server to authenticate itself = properly: javax.security.auth.login.LoginException: Message stream = modified (41) at = org.apache.zookeeper.server.ServerCnxnFactory.configureSaslLogin(ServerCnx= nFactory.java:243) at = org.apache.zookeeper.server.NIOServerCnxnFactory.configure(NIOServerCnxnFa= ctory.java:646) at = org.apache.zookeeper.server.quorum.QuorumPeerMain.runFromConfig(QuorumPeer= Main.java:148) at = org.apache.zookeeper.server.quorum.QuorumPeerMain.initializeAndRun(QuorumP= eerMain.java:123) at = org.apache.zookeeper.server.quorum.QuorumPeerMain.main(QuorumPeerMain.java= :82) =E2=80=A6 zoo.cfg: =E2=80=94=E2=80=94=E2=80=94=E2=80=94 tickTime=3D2000 initLimit=3D10 syncLimit=3D5 = 4lw.commands.whitelist=3Dconf,cons,crst,dirs,dump,envi,gtmk,ruok,stmk,srst= ,srvr,stat,wchs,mntr,isro dataDir=3D/var/lib/zookeeper dataLogDir=3D/var/lib/zookeeper clientPort=3D2181 maxClientCnxns=3D60 minSessionTimeout=3D4000 maxSessionTimeout=3D60000 autopurge.purgeInterval=3D24 autopurge.snapRetainCount=3D5 quorum.auth.enableSasl=3Dtrue quorum.cnxn.threads.size=3D20 admin.enableServer=3Dfalse admin.serverPort=3D5181 server.1=3Dcdf1-dc1.mydomain.com:3181:4181 server.2=3Dcdf1-dc2.mydomain.com:3181:4181 server.3=3Dcdf1-dc3.mydomain.com:3181:4181 leaderServes=3Dyes = authProvider.1=3Dorg.apache.zookeeper.server.auth.SASLAuthenticationProvid= er kerberos.removeHostFromPrincipal=3Dtrue kerberos.removeRealmFromPrincipal=3Dtrue quorum.auth.kerberos.servicePrincipal=3Dzookeeper/_HOST quorum.auth.learnerRequireSasl=3Dtrue quorum.auth.serverRequireSasl=3Dtrue java -version: =E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94 openjdk version "11.0.4" 2019-07-16 OpenJDK Runtime Environment AdoptOpenJDK (build 11.0.4+11) OpenJDK 64-Bit Server VM AdoptOpenJDK (build 11.0.4+11, mixed mode) Has anyone seen this problem before? What does the error message mean? Unfortunately we swallow the original exception in ServerCnxnFactory and = only log the message without stacktrace. Thanks, Andor