[HADOOP-8315] Support SASL-authenticated ZooKeeper in ActiveStandbyElector

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Auto Failover (HDFS-3042)
• Fix Version/s: 2.2.0
• Component/s: auto-failover, ha
• Hadoop Flags: Reviewed
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 25/Apr/12 22:49
• Updated: 30/Jun/15 07:22
• Resolved: 02/Oct/13 00:46

Description

Currently, if you try to use SASL-authenticated ZK with the ActiveStandbyElector, you run into a couple issues:
1) We hit ZOOKEEPER-1437 - we need to wait until we see SaslAuthenticated before we can make any requests
2) We currently throw a fatalError when we see the SaslAuthenticated callback on the connection watcher

We need to wait for ZK-1437 upstream, and then upgrade to the fixed version for #1. For #2 we just need to add a case there and ignore it.

Issue Links

• is blocked by: ZOOKEEPER-1686 Publish ZK 3.4.5 test jar
• is duplicated by: HADOOP-9498 ActiveStandbyElector doesn't work with secure ZooKeeper
• is related to: ZOOKEEPER-1455 there is no way to determine if a session is sasl authenticated or not
• is required by: HADOOP-9938 Avoiding redundant Kerberos login for Zookeeper client in ActiveStandbyElector
• relates to: ZOOKEEPER-1437 Client uses session before SASL authentication complete