[ZOOKEEPER-1455] there is no way to determine if a session is sasl authenticated or not

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Patrick D. Hunt
• Created: 26/Apr/12 17:12
• Updated: 25/Sep/13 09:53

Description

The ZooKeeper interface provides no way to determine if the session is sasl authenticated or not. There is an event sent to the watcher when the sasl authentication completes, however there no way to determine if there is intent to negotiate via sasl. As a result the event cannot be used to wait to send messages until the authentication has completed. see HADOOP-8315

Issue Links

• is depended upon by: ZOOKEEPER-1764 ZooKeeper attempts at SASL eventhough it shouldn't
• is related to: ZOOKEEPER-1381 Add a method to get the zookeeper server version from the client
• relates to: ZOOKEEPER-1456 sessions cannot specify whether they require kerberos authenticated sessions or not
• relates to: ZOOKEEPER-1437 Client uses session before SASL authentication complete
• relates to: ZOOKEEPER-1497 Allow server-side SASL login with JAAS configuration to be programmatically set (rather than only by reading JAAS configuration file)
• relates to: HADOOP-8315 Support SASL-authenticated ZooKeeper in ActiveStandbyElector