You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@zookeeper.apache.org by Chao Sun <su...@apache.org> on 2016/02/20 01:58:01 UTC

ZooKeeper authentication error

Hi,


I'm trying to login to ZK using kerberos, and then perform some operations.
However, the following doesn't work:

2016-02-19 16:31:32,572 [myid:] - INFO  [Thread-1:Login@397] -Initiating
re-login for <me...@EXAMPLE.COM>

2016-02-19 16:31:32,588 [myid:] - INFO  [Thread-1:Login@301] - TGT valid
starting at:        Fri Feb 19 16:31:32 PST 2016
2016-02-19 16:31:32,588 [myid:] - INFO  [Thread-1:Login@302] - TGT expires:
                 Fri Feb 19 16:46:32 PST 2016
2016-02-19 16:31:32,588 [myid:] - INFO  [Thread-1:Login$1@181] - TGT
refresh sleeping until: Fri Feb 19 16:43:50 PST 2016

[zk: hostname(CONNECTED) 11]
[zk: hostname(CONNECTED) 11] getAcl /zk-test
'sasl,'me/hostname@EXAMPLE.COM@: cdrwa
[zk: hostname(CONNECTED) 12] ls /zk-test
Authentication is not valid : /zk-test

Even though I've already logged in using the principal me/
hostname@EXAMPLE.COM, and the ACL for /zk-test is
sasl:me/hostname@EXAMPLE.COM:cdrwa, I still cannot do simple stuff like ls
/zk-test. Anyone know
what is missing here?
Thanks.

Best,
Chao