[ZOOKEEPER-2365] JAAS configuration section error is confusing

• Type: Bug
• Status: Open
• Priority: Trivial
• Resolution: Unresolved
• Affects Version/s: 3.4.6
• Component/s: java client

Environment

Ubuntu x86_64 openjdk-7-jre

• Assignee: Biju Nair
• Reporter: Dan Fitch
• Created: 10/Feb/16 22:24
• Updated: 14/Feb/22 17:27

Description

I have zookeeper running normally just fine in a 3-server cluster.

Then I try to configure zookeeper to use Kerberos, following docs in the Solr wiki here: https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin

I can't even get to the fun Kerberos errors. When I start with JVMFLAGS="-Djava.security.auth.login.config=/opt/zookeeper/jaas-server.conf"

and this jaas-server.conf:

Server {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab=/keytabs/vdev-solr-01.keytab
storeKey=true
doNotPrompt=true
useTicketCache=false
debug=true
principal="HTTP/<snip>";
}

I get this in the log:

2016-02-10 16:16:51,327 [myid:1] - ERROR [main:ServerCnxnFactory@195] - No JAAS configuration section named 'Server' was foundin '/opt/zookeeper/jaas-server.conf'.
2016-02-10 16:16:51,328 [myid:1] - ERROR [main:QuorumPeerMain@89] - Unexpected exception, exiting abnormally
java.io.IOException: No JAAS configuration section named 'Server' was foundin '/opt/zookeeper/jaas-server.conf'.
        at org.apache.zookeeper.server.ServerCnxnFactory.configureSaslLogin(ServerCnxnFactory.java:196)
        at org.apache.zookeeper.server.NIOServerCnxnFactory.configure(NIOServerCnxnFactory.java:87)
        at org.apache.zookeeper.server.quorum.QuorumPeerMain.runFromConfig(QuorumPeerMain.java:130)
        at org.apache.zookeeper.server.quorum.QuorumPeerMain.initializeAndRun(QuorumPeerMain.java:111)
        at org.apache.zookeeper.server.quorum.QuorumPeerMain.main(QuorumPeerMain.java:78)

(Note the "foundin" typo.)

I get the exact same error if the jaas-server.conf file exists, or does not.

So later I found that the Solr wiki was wrong and lost the double quotes around the keytab value. It would be nice if Zookeeper spewed a more useful message when it can't parse the configuration.

Issue Links

• is related to: ZOOKEEPER-2345 ServerCnxnFactory.configureSaslLogin() loses stack trace on auth failures