[
https://issues.apache.org/jira/browse/ZOOKEEPER-4973?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18017948#comment-18017948
]
Andor Molnar commented on ZOOKEEPER-4973:
-----------------------------------------
This is the client side. *zoo.cfg* is not being used on the client side, you
can configure the client via system properties only.
> fips-mode parameter in the configuration doesn't work as expected
> -----------------------------------------------------------------
>
> Key: ZOOKEEPER-4973
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4973
> Project: ZooKeeper
> Issue Type: Task
> Components: java client, security, server
> Affects Versions: 3.9.4
> Reporter: Jota Martos
> Priority: Major
>
> When using Zookeeper 3.9.4, I was trying to disable FIPS by setting the
> "fips-mode" parameter to false in the configuration as described in [the
> documentation|https://zookeeper.apache.org/doc/r3.9.4/zookeeperAdmin.html].
> {code}
> $ cat /path/to/zoo.cfg
> ...
> fips-mode=false
> ...
> {code}
> However, that doesn't disable FIPS and I get errors when trying to configure
> authentication
> {code}
> zookeeper-1 | 2025-09-03 12:00:10,219 [myid:localhost:2181] - INFO
> [main-SendThread(localhost:2181):o.a.z.Login@332] - Client successfully
> logged in.
> zookeeper-1 | 2025-09-03 12:00:10,220 [myid:localhost:2181] - WARN
> [main-SendThread(localhost:2181):o.a.z.u.SecurityUtils@75] - Client will not
> use DIGEST-MD5 as SASL mechanism, because FIPS mode is enabled.
> zookeeper-1 | 2025-09-03 12:00:10,220 [myid:localhost:2181] - INFO
> [main-SendThread(localhost:2181):o.a.z.ClientCnxn$SendThread@1170] - Opening
> socket connection to server localhost/127.0.0.1:2181.
> {code}
> The issue is solved when using the flag "-Dzookeeper.fips-mode=false" (as
> mentioned in the documentation too).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
