[ZOOKEEPER-2606] SaslServerCallbackHandler#handleAuthorizeCallback() should log the exception

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.4.10, 3.5.3, 3.6.0
• Labels: security
• Assignee: Ted Yu
• Reporter: Ted Yu
• Created: 04/Oct/16 13:00
• Updated: 31/Mar/17 09:01
• Resolved: 17/Oct/16 08:48

Description

            LOG.info("Setting authorizedID: " + userNameBuilder);
            ac.setAuthorizedID(userNameBuilder.toString());
        } catch (IOException e) {
            LOG.error("Failed to set name based on Kerberos authentication rules.");
        }

On one cluster, we saw the following:

2016-10-04 02:18:16,484 - ERROR [NIOServerCxn.Factory:0.0.0.0/0.0.0.0:2181:SaslServerCallbackHandler@137] - Failed to set name based on Kerberos authentication rules.

It would be helpful if the log contains information about the IOException.