[ZOOKEEPER-2585] ACL with SSL is not working

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Affects Version/s: 3.5.1
• Component/s: server
• Assignee: Unassigned
• Reporter: Rakesh Kumar Singh
• Created: 15/Sep/16 07:16
• Updated: 21/Sep/16 08:48

Description

Set ACL with SSL is not working

Steps to reproduce:-
1. Start zookeeper in ssl mode in standalone
2. Connect zookeeper from zookeeper client (using zkCli.sh)
3. add auth and set ACL as below and then quit the client :-

[zk: localhost:2181(CONNECTED) 0] addauth digest u1:p1
[zk: localhost:2181(CONNECTED) 1] create /test_auth hello
Created /test_auth
[zk: localhost:2181(CONNECTED) 2] setAcl /test_auth auth:u1:p1:crdwa
[zk: localhost:2181(CONNECTED) 3] get /test_auth
hello
[zk: localhost:2181(CONNECTED) 4] quit

4. Connect again zookeeper from zookeeper client (using zkCli.sh)
5. Try to access the znode, try to set the data and so on, everything is allowed

[zk: localhost:2181(CONNECTED) 2] set /test_auth hello1
[zk: localhost:2181(CONNECTED) 3] get /test_auth
hello1
[zk: localhost:2181(CONNECTED) 1] getAcl /test_auth
'x509,'CN=locahost%2COU=CS%2CO=HUAWEI%2CL=Shenzhen%2CST=Guangdong%2CC=CHINA
: cdrwa
'digest,'u1:fpT/y03U+EjItKZOSLGvjnJlyng=
: cdrwa