Uploaded image for project: 'ZooKeeper'
  1. ZooKeeper
  2. ZOOKEEPER-2323

ZooKeeper client enters into infinite AuthFailedException cycle if its unable to recreate Kerberos ticket


    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.4.7, 3.5.1
    • Fix Version/s: 3.5.2
    • Component/s: java client
    • Labels:


      ZooKeeper client enters into infinite AuthFailedException cycle. For every operation its throws AuthFailedException
      Here is the create operation exception

      org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = AuthFailed for /continuousRunningZKClient
      	at org.apache.zookeeper.KeeperException.create(KeeperException.java:127)
      	at org.apache.zookeeper.KeeperException.create(KeeperException.java:51)
      	at org.apache.zookeeper.ZooKeeper.getData(ZooKeeper.java:1753)

      This can be reproduced easily with the following steps:

      1. Reduce the ZooKeeper client principal max life for example set 2 min. use command modprinc -maxlife 2min zkcli in kadmin. (This is done to reduce the issue reproduce time)
      2. Connect Client to ZooKeeper quorum,let it gets connected and some operations are done successfully
      3. Disconnect the Client's network, by pulling out the Ethernet cable or by any way. Now the Client is in disconnected state, no operation is expected,Client tries to reconnect to different-different servers in the ZooKeeper quorum.
      4. After two minutes Client tries to get new Keberos ticket and it fails.
      5. Connect the Client to network. Client comes in connected state but AuthFailedException for every operation.


          Issue Links



              • Assignee:
                arshad.mohammad Mohammad Arshad
                arshad.mohammad Mohammad Arshad
              • Votes:
                1 Vote for this issue
                5 Start watching this issue


                • Created: