[ZOOKEEPER-2589] Not able to access znode if IP ACL is set on a znode when zookeeper started in ssl mode

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.5.1
• Assignee: Unassigned
• Reporter: Rakesh Kumar Singh
• Created: 17/Sep/16 06:18
• Updated: 21/Sep/16 05:12

Description

Not able to access znode if IP ACL is set on a znode when zookeeper started in ssl mode.

Steps to reproduce:-
1. Start zookeeper in SSL (standalone) mode
2. Create a znode
3. set ip ACL and connect the zkCli and try to access, it does not allow.

[zk: localhost:2181(CONNECTED) 3] setAcl /test ip:127.0.0.1:crdwa
[zk: localhost:2181(CONNECTED) 5] quit

>> start the zkCli with 127.0.0.1 and trying access the znode
[zk: 127.0.0.1:2181(CONNECTED) 0] get -s /test
Authentication is not valid : /test
[zk: 127.0.0.1:2181(CONNECTED) 1] getAcl /test
'ip,'127.0.0.1
: cdrwa
[zk: 127.0.0.1:2181(CONNECTED) 2] get /test
Authentication is not valid : /test