[ZOOKEEPER-1185] Send AuthFailed event to client if SASL authentication fails

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.0
• Fix Version/s: 3.4.0, 3.5.0
• Component/s: java client
• Labels: kerberos security

Release Note

This patch fixes SaslAuthFailTest.testBadSaslAuthNotifiesWatch() to test for the AuthFailed event : previously, the test was incorrectly not testing for this event.

It also removes the testBadSaslAuthNotifiesWatch() method from the SaslAuthTest class : this method belongs in SaslAuthFailTest, not SaslAuthTest. The former tests unsuccessful SASL authentication; the latter, successful SASL authentication.

• Assignee: Eugene Koontz
• Reporter: Eugene Koontz
• Created: 15/Sep/11 01:11
• Updated: 02/May/13 02:29
• Resolved: 27/Sep/11 02:09

Description

There are 3 places where ClientCnxn should queue a AuthFailed event if client fails to authenticate. Without sending this event, clients may be stuck watching for a SaslAuthenticated event that will never come (since the client failed to authenticate).

Issue Links

• depends upon: ZOOKEEPER-938 Support Kerberos authentication of clients.