[ZOOKEEPER-2323] ZooKeeper client enters into infinite AuthFailedException cycle if its unable to recreate Kerberos ticket

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.7, 3.5.1
• Fix Version/s: 3.5.2
• Component/s: java client
• Assignee: Mohammad Arshad
• Reporter: Mohammad Arshad
• Created: 18/Nov/15 20:29
• Updated: 11/Aug/16 20:00
• Resolved: 11/Aug/16 20:00

Description

ZooKeeper client enters into infinite AuthFailedException cycle. For every operation its throws AuthFailedException
Here is the create operation exception

org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = AuthFailed for /continuousRunningZKClient
	at org.apache.zookeeper.KeeperException.create(KeeperException.java:127)
	at org.apache.zookeeper.KeeperException.create(KeeperException.java:51)
	at org.apache.zookeeper.ZooKeeper.getData(ZooKeeper.java:1753)

This can be reproduced easily with the following steps:

1. Reduce the ZooKeeper client principal max life for example set 2 min. use command modprinc -maxlife 2min zkcli in kadmin. (This is done to reduce the issue reproduce time)
2. Connect Client to ZooKeeper quorum,let it gets connected and some operations are done successfully
3. Disconnect the Client's network, by pulling out the Ethernet cable or by any way. Now the Client is in disconnected state, no operation is expected,Client tries to reconnect to different-different servers in the ZooKeeper quorum.
4. After two minutes Client tries to get new Keberos ticket and it fails.
5. Connect the Client to network. Client comes in connected state but AuthFailedException for every operation.

Issue Links

• is related to: ZOOKEEPER-2139 Support multiple ZooKeeper client, with different configurations, in a single JVM