[ZOOKEEPER-2858] Disable reverse DNS lookup for java client

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.4.6
• Component/s: java client
• Assignee: Unassigned
• Reporter: Andrey
• Created: 26/Jul/17 14:03
• Updated: 17/Nov/17 22:12

Description

I have the following setup:

• zookeeper server running in docker container
• kerberos auth

When client setup sasl connection it creates service principal name as:

• "principalUserName+"/"+addr.getHostName()",

where:

• addr.getHostName is the reverse DNS of original server host.

If zookeeper nodes will be deployed behind the firewall or software defined network (the docker case), then reverse DNS host won't match original server host. And this is done by design.

If these hosts won't match, then principals won't match and Kerberos auth will fail.

Is it possible to introduce some configuration parameter to disable reverse DNS lookups?