Re: ZooKeeper 3.4.10 release discussion

2017-03-06 Thread Rakesh Radhakrishnan
Thank you everyone for the great support!

ZOOKEEPER-2693 has been merged. I hope we are good to go and I will prepare
release candidate.

Regards,
Rakesh

On Wed, Feb 8, 2017 at 10:06 AM, Rakesh Radhakrishnan 
wrote:

> Thank you Michael for the useful comments. I've updated the wiki page,
> kindly review it again.
>
>
> Rakesh
>
> On Wed, Feb 8, 2017 at 4:17 AM, Michael Han  wrote:
>
>> Hi Rakesh,
>>
>> My super late feedback for
>> https://cwiki.apache.org/confluence/display/ZOOKEEPER/HowToR
>> elease+using+git
>> with two minor comments:
>>
>> * In Branching section, it said:
>> # create new branch-X.Y from master branch
>> git checkout -b branch-X.Y master
>>
>> # commit and push the changes to remote repo
>> git commit -m "Preparing for release X.Y.Z"
>> git push  branch-X.Y
>>
>> I believe the "git commit" step is redundant, because all we do here is to
>> create a branch from master, and there is nothing to commit (no staged
>> files.). We could just remove the commit step.
>>
>> * In Updating release branch section, 2 - it mentions merge patch. I think
>> the recommended approach (or best practice?) which Edward also pointed out
>> earlier is to use 'git cherry-pick', so we can have a consistent revision
>> history between branches.
>>
>> Thanks for putting up the wiki page!
>>
>> On Tue, Feb 7, 2017 at 8:02 AM, Rakesh Radhakrishnan 
>> wrote:
>>
>> > Hi PMCs/committers,
>> >
>> > It would be great to see feedback on the updated branching release
>> > procedure mentioned in the cwiki page. How about publishing an initial
>> > release candidate by following the new procedure, probably you all can
>> > verify the RC-0 and do voting?
>> >
>> > Thanks,
>> > Rakesh
>> >
>> > On Thu, Feb 2, 2017 at 9:43 PM, Rakesh Radhakrishnan <
>> rake...@apache.org>
>> > wrote:
>> >
>> > > Hi All,
>> > >
>> > > I've tried an attempt by converting all the applicable svn commands to
>> > git
>> > > commands in "HowToRelease using git" cwiki page. Welcome comments,
>> > thanks!
>> > >
>> > > https://cwiki.apache.org/confluence/display/ZOOKEEPER/
>> > > HowToRelease+using+git
>> > >
>> > > Thanks,
>> > > Rakesh
>> > >
>> > > On Fri, Jan 27, 2017 at 11:54 PM, Edward Ribeiro <
>> > edward.ribe...@gmail.com
>> > > > wrote:
>> > >
>> > >> ​​
>> > >> Hi Rakesh,
>> > >>
>> > >> I have comment on ZK-2622.
>> > >>
>> > >> Took a look at the 'HowToRelease' using git page and have one minor
>> > >> comment:
>> > >>
>> > >> 2. "If not already done, merge desired patches from master into the
>> > branch
>> > >> and commit these changes.
>> > >> (...)
>> > >> "
>> > >>
>> > >> AFAIK merging from master to branch-3.4 would bring all those
>> changes in
>> > >> master and try to apply them to branch-3.4. This usuallys leads to
>> lots
>> > of
>> > >> conflicts and is not desirable. What I usually see in Cassandra
>> commit
>> > >> history is merging upwards: 2.2 -> 3.0 -> 3.1 -> master so that
>> changes
>> > in
>> > >> previous versions are
>> > >> ​ported​ to
>> > >>  further releases
>> > >> ​: https://github.com/apache/cassandra/commits/trunk​
>> > >>
>> > >>
>> > >> So
>> > >> ​,​
>> > >> I would rephrase the "merge desired patches from master into branch
>> and
>> > >> commit those changes" to "cherry-pick desired commits from master
>> into
>> > >> branch". The act of merging/rebasing/cherry-picking auto commit the
>> > >> changes
>> > >> on the target branch. If you want to avoid doing that then have to
>> > resort
>> > >> to things like this:
>> > >> http://stackoverflow.com/questions/8640887/git-merge-
>> > without-auto-commit
>> > >>
>> > >> BUT I AM NOT GIT EXPERT, so I feel free to ignore this suggestion.
>> > >> ​Further info​
>> > >>  here:
>> > >> http://stackoverflow.com/questions/1241720/git-cherry-pick-
>> > >> vs-merge-workflow
>> > >>
>> > >> ​Best regards,
>> > >> Eddie​
>> > >>
>> > >>
>> > >> On Fri, Jan 27, 2017 at 9:30 AM, Rakesh Radhakrishnan <
>> > rake...@apache.org
>> > >> >
>> > >> wrote:
>> > >>
>> > >> > Thanks Edward for the interest. I hope you are watching
>> 'HowToRelease'
>> > >> > using git page discussion, which is still in progress. I'd like to
>> > give
>> > >> > some more time to the folks to push their interesting issues(I'd
>> > prefer
>> > >> > issues with low risk) until the release procedure is finalized.
>> > >> >
>> > >> > I've marked ZOOKEEPER-2622's fix version to 3.4.10, appreciate your
>> > >> > feedback on the attached pull request so that some of our
>> committers
>> > >> will
>> > >> > help in pushing it upstream.
>> > >> >
>> > >> > Thanks,
>> > >> > Rakesh
>> > >> >
>> > >> > On Thu, Jan 26, 2017 at 5:35 PM, Edward Ribeiro <
>> > >> edward.ribe...@gmail.com>
>> > >> > wrote:
>> > >> >
>> > >> > > Hi,
>> > >> > >
>> > >> > > Rakesh and Flavio, what do you think about merging
>> ZOOKEEPER-2622 to
>> > >> > > branch-3.4 and include it in 3.4.10 besides branch-3.5 and
>> master?
>> > >> > >
>> > >> > > Edward
>> > >> > >

[GitHub] zookeeper issue #165: ZOOKEEPER-2665 Port QA github pull request build to br...

2017-03-06 Thread eolivelli
Github user eolivelli commented on the issue:

https://github.com/apache/zookeeper/pull/165
  
@hanm the patch is almost the same as for trunk, just a work of "copy and 
paste"

Eventually you can compare the diff with #97 



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[jira] [Commented] (ZOOKEEPER-2665) Port QA github pull request build to branch 3.4 and 3.5

2017-03-06 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2665?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898871#comment-15898871
 ] 

ASF GitHub Bot commented on ZOOKEEPER-2665:
---

Github user eolivelli commented on the issue:

https://github.com/apache/zookeeper/pull/165
  
@hanm the patch is almost the same as for trunk, just a work of "copy and 
paste"

Eventually you can compare the diff with #97 



> Port QA github pull request build to branch 3.4 and 3.5
> ---
>
> Key: ZOOKEEPER-2665
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2665
> Project: ZooKeeper
>  Issue Type: Test
>  Components: build
>Reporter: Flavio Junqueira
> Fix For: 3.5.3, 3.4.11
>
>
> We have QA build for pull requests against master but not against branches 
> 3.4 and 3.5. We need to port the necessary wiring to do it, it shouldn't be 
> difficult.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


ZooKeeper_branch34 - Build # 1859 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper_branch34/1859/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 3.19 KB...]
  collisions:0 txqueuelen:0 
  RX bytes:30366105671962 (30.3 TB)  TX bytes:30366105671962 (30.3 TB)

core file size  (blocks, -c) 0
data seg size   (kbytes, -d) unlimited
scheduling priority (-e) 0
file size   (blocks, -f) unlimited
pending signals (-i) 386178
max locked memory   (kbytes, -l) 64
max memory size (kbytes, -m) unlimited
open files  (-n) 6
pipe size(512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority  (-r) 0
stack size  (kbytes, -s) 8192
cpu time   (seconds, -t) unlimited
max user processes  (-u) 10240
virtual memory  (kbytes, -v) unlimited
file locks  (-x) unlimited
6
/home/jenkins/tools/ant/latest/bin/ant clean
Exception in thread "main" java.lang.UnsupportedClassVersionError: 
org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:800)
at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:449)
at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
Exception in thread "main" java.lang.UnsupportedClassVersionError: 
org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:800)
at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:449)
at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
mv: cannot stat 'build/*.tar.gz': No such file or directory
mv: cannot stat 'build/*.jar': No such file or directory
mv: cannot stat 'build/test/findbugs': No such file or directory
mv: cannot stat 'build/docs/api': No such file or directory
Build Failed
Build step 'Execute shell' marked build as failure
Recording test results
ERROR: Step ?Publish JUnit test result report? failed: No test report files 
were found. Configuration error?
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any



###
## FAILED TESTS (if any) 
##
No tests ran.

ZooKeeper_branch34_openjdk7 - Build # 1415 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper_branch34_openjdk7/1415/

###
## LAST 60 LINES OF THE CONSOLE 
###
Started by an SCM change
[EnvInject] - Loading node environment variables.
Building remotely on ubuntu-us1 (ubuntu) in workspace 
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34_openjdk7
 > git rev-parse --is-inside-work-tree # timeout=10
Fetching changes from the remote Git repository
 > git config remote.origin.url git://git.apache.org/zookeeper.git # timeout=10
Cleaning workspace
 > git rev-parse --verify HEAD # timeout=10
Resetting working tree
 > git reset --hard # timeout=10
 > git clean -fdx # timeout=10
Fetching upstream changes from git://git.apache.org/zookeeper.git
 > git --version # timeout=10
 > git fetch --tags --progress git://git.apache.org/zookeeper.git 
 > +refs/heads/*:refs/remotes/origin/*
 > git rev-parse refs/remotes/origin/branch-3.4^{commit} # timeout=10
 > git rev-parse refs/remotes/origin/origin/branch-3.4^{commit} # timeout=10
Checking out Revision 835377f0e1cd215e791ed29c0bcff95e625f299c 
(refs/remotes/origin/branch-3.4)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 835377f0e1cd215e791ed29c0bcff95e625f299c
 > git rev-list b26eaf3492a43821f648d8a8f87d8ac3488f1cef # timeout=10
No emails were triggered.
[ZooKeeper_branch34_openjdk7] $ /home/jenkins/tools/ant/latest/bin/ant 
-Dtest.output=yes -Dtest.junit.threads=8 -Dtest.junit.output.format=xml 
-Djavac.target=1.7 clean test-core-java
Exception in thread "main" java.lang.UnsupportedClassVersionError: 
org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:803)
at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:442)
at java.net.URLClassLoader.access$100(URLClassLoader.java:64)
at java.net.URLClassLoader$1.run(URLClassLoader.java:354)
at java.net.URLClassLoader$1.run(URLClassLoader.java:348)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:347)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
Build step 'Invoke Ant' marked build as failure
Recording test results
ERROR: Step ‘Publish JUnit test result report’ failed: No test report files 
were found. Configuration error?
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any



###
## FAILED TESTS (if any) 
##
No tests ran.

ZooKeeper_branch34_jdk8 - Build # 907 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper_branch34_jdk8/907/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 25.54 MB...]
[junit] 2017-03-07 07:04:48,963 [myid:] - INFO  
[main:SessionTrackerImpl@225] - Shutting down
[junit] 2017-03-07 07:04:48,963 [myid:] - INFO  
[main:PrepRequestProcessor@764] - Shutting down
[junit] 2017-03-07 07:04:48,963 [myid:] - INFO  
[main:SyncRequestProcessor@208] - Shutting down
[junit] 2017-03-07 07:04:48,964 [myid:] - INFO  [ProcessThread(sid:0 
cport:11221)::PrepRequestProcessor@143] - PrepRequestProcessor exited loop!
[junit] 2017-03-07 07:04:48,964 [myid:] - INFO  
[SyncThread:0:SyncRequestProcessor@186] - SyncRequestProcessor exited!
[junit] 2017-03-07 07:04:48,964 [myid:] - INFO  
[main:FinalRequestProcessor@402] - shutdown of request processor complete
[junit] 2017-03-07 07:04:48,964 [myid:] - INFO  
[main:FourLetterWordMain@62] - connecting to 127.0.0.1 11221
[junit] 2017-03-07 07:04:48,965 [myid:] - INFO  [main:JMXEnv@147] - 
ensureOnly:[]
[junit] 2017-03-07 07:04:48,966 [myid:] - INFO  [main:ClientBase@445] - 
STARTING server
[junit] 2017-03-07 07:04:48,966 [myid:] - INFO  [main:ClientBase@366] - 
CREATING server instance 127.0.0.1:11221
[junit] 2017-03-07 07:04:48,966 [myid:] - INFO  
[main:NIOServerCnxnFactory@89] - binding to port 0.0.0.0/0.0.0.0:11221
[junit] 2017-03-07 07:04:48,967 [myid:] - INFO  [main:ClientBase@341] - 
STARTING server instance 127.0.0.1:11221
[junit] 2017-03-07 07:04:48,967 [myid:] - INFO  [main:ZooKeeperServer@173] 
- Created server with tickTime 3000 minSessionTimeout 6000 maxSessionTimeout 
6 datadir 
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34_jdk8/build/test/tmp/test2006411139806196769.junit.dir/version-2
 snapdir 
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34_jdk8/build/test/tmp/test2006411139806196769.junit.dir/version-2
[junit] 2017-03-07 07:04:48,970 [myid:] - ERROR [main:ZooKeeperServer@472] 
- ZKShutdownHandler is not registered, so ZooKeeper server won't take any 
action on ERROR or SHUTDOWN server state changes
[junit] 2017-03-07 07:04:48,970 [myid:] - INFO  
[main:FourLetterWordMain@62] - connecting to 127.0.0.1 11221
[junit] 2017-03-07 07:04:48,970 [myid:] - INFO  
[NIOServerCxn.Factory:0.0.0.0/0.0.0.0:11221:NIOServerCnxnFactory@192] - 
Accepted socket connection from /127.0.0.1:59496
[junit] 2017-03-07 07:04:48,971 [myid:] - INFO  
[NIOServerCxn.Factory:0.0.0.0/0.0.0.0:11221:NIOServerCnxn@883] - Processing 
stat command from /127.0.0.1:59496
[junit] 2017-03-07 07:04:48,971 [myid:] - INFO  
[Thread-4:NIOServerCnxn$StatCommand@674] - Stat command output
[junit] 2017-03-07 07:04:48,971 [myid:] - INFO  
[Thread-4:NIOServerCnxn@1044] - Closed socket connection for client 
/127.0.0.1:59496 (no session established for client)
[junit] 2017-03-07 07:04:48,972 [myid:] - INFO  [main:JMXEnv@230] - 
ensureParent:[InMemoryDataTree, StandaloneServer_port]
[junit] 2017-03-07 07:04:48,973 [myid:] - INFO  [main:JMXEnv@247] - 
expect:InMemoryDataTree
[junit] 2017-03-07 07:04:48,973 [myid:] - INFO  [main:JMXEnv@251] - 
found:InMemoryDataTree 
org.apache.ZooKeeperService:name0=StandaloneServer_port11221,name1=InMemoryDataTree
[junit] 2017-03-07 07:04:48,973 [myid:] - INFO  [main:JMXEnv@247] - 
expect:StandaloneServer_port
[junit] 2017-03-07 07:04:48,974 [myid:] - INFO  [main:JMXEnv@251] - 
found:StandaloneServer_port 
org.apache.ZooKeeperService:name0=StandaloneServer_port11221
[junit] 2017-03-07 07:04:48,974 [myid:] - INFO  
[main:JUnit4ZKTestRunner$LoggedInvokeMethod@58] - Memory used 35517
[junit] 2017-03-07 07:04:48,974 [myid:] - INFO  
[main:JUnit4ZKTestRunner$LoggedInvokeMethod@63] - Number of threads 20
[junit] 2017-03-07 07:04:48,974 [myid:] - INFO  
[main:JUnit4ZKTestRunner$LoggedInvokeMethod@78] - FINISHED TEST METHOD testQuota
[junit] 2017-03-07 07:04:48,974 [myid:] - INFO  [main:ClientBase@522] - 
tearDown starting
[junit] 2017-03-07 07:04:49,049 [myid:] - INFO  [main:ZooKeeper@684] - 
Session: 0x15aa795ada6 closed
[junit] 2017-03-07 07:04:49,049 [myid:] - INFO  
[main-EventThread:ClientCnxn$EventThread@519] - EventThread shut down for 
session: 0x15aa795ada6
[junit] 2017-03-07 07:04:49,050 [myid:] - INFO  [main:ClientBase@492] - 
STOPPING server
[junit] 2017-03-07 07:04:49,050 [myid:] - INFO  
[NIOServerCxn.Factory:0.0.0.0/0.0.0.0:11221:NIOServerCnxnFactory@219] - 
NIOServerCnxn factory exited run method
[junit] 2017-03-07 07:04:49,051 [myid:] - INFO  [main:ZooKeeperServer@505] 
- shutting down
[junit] 2017-03-07 07:04:49,051 [myid:] - ERROR [main:ZooKeeperServer@472] 
- ZKShutdownHandler is not registered, so ZooKeeper server won't take any 
action on ERROR or SHUTDOWN server state changes
[junit] 2017-03-07 07:04:49,051 

Failed: ZOOKEEPER- PreCommit Build #384

2017-03-06 Thread Apache Jenkins Server
Build: https://builds.apache.org/job/PreCommit-ZOOKEEPER-github-pr-build/384/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 73.30 KB...]
warning: Cannot merge binary files: docs/zookeeperAdmin.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)
warning: Cannot merge binary files: docs/recipes.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)
warning: Cannot merge binary files: docs/linkmap.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)
warning: Cannot merge binary files: docs/javaExample.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)
warning: Cannot merge binary files: docs/index.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)
warning: Cannot merge binary files: docs/bookkeeperStream.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)
warning: Cannot merge binary files: docs/bookkeeperStarted.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)
warning: Cannot merge binary files: docs/bookkeeperProgrammer.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)
warning: Cannot merge binary files: docs/bookkeeperOverview.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)
warning: Cannot merge binary files: docs/bookkeeperConfig.pdf (HEAD vs. 
835377f0e1cd215e791ed29c0bcff95e625f299c)

at 
org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1784)
at 
org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1757)
at 
org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:1753)
at 
org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommand(CliGitAPIImpl.java:1409)
at 
org.jenkinsci.plugins.gitclient.CliGitAPIImpl$3.execute(CliGitAPIImpl.java:588)
at 
org.jenkinsci.plugins.gitclient.AbstractGitAPIImpl.merge(AbstractGitAPIImpl.java:86)
at 
org.jenkinsci.plugins.gitclient.CliGitAPIImpl.merge(CliGitAPIImpl.java:64)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at 
hudson.remoting.RemoteInvocationHandler$RPCRequest.perform(RemoteInvocationHandler.java:894)
at 
hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:869)
at 
hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:828)
at hudson.remoting.UserRequest.perform(UserRequest.java:153)
at hudson.remoting.UserRequest.perform(UserRequest.java:50)
at hudson.remoting.Request$2.run(Request.java:336)
at 
hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:68)
at java.util.concurrent.FutureTask.run(FutureTask.java:262)
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:745)
at ..remote call to H6(Native Method)
at hudson.remoting.Channel.attachCallSiteStackTrace(Channel.java:1537)
at hudson.remoting.UserResponse.retrieve(UserRequest.java:253)
at hudson.remoting.Channel.call(Channel.java:822)
at 
hudson.remoting.RemoteInvocationHandler.invoke(RemoteInvocationHandler.java:256)
at com.sun.proxy.$Proxy95.merge(Unknown Source)
at 
org.jenkinsci.plugins.gitclient.RemoteGitImpl.merge(RemoteGitImpl.java:434)
at 
com.cloudbees.jenkins.plugins.git.vmerge.BuildChooserImpl.getCandidateRevisions(BuildChooserImpl.java:107)
at hudson.plugins.git.GitSCM.determineRevisionToBuild(GitSCM.java:995)
at hudson.plugins.git.GitSCM.checkout(GitSCM.java:1098)
at hudson.scm.SCM.checkout(SCM.java:495)
at hudson.model.AbstractProject.checkout(AbstractProject.java:1278)
at 
hudson.model.AbstractBuild$AbstractBuildExecution.defaultCheckout(AbstractBuild.java:604)
at jenkins.scm.SCMCheckoutStrategy.checkout(SCMCheckoutStrategy.java:86)
at 
hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:529)
at hudson.model.Run.execute(Run.java:1728)
at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
at hudson.model.ResourceController.execute(ResourceController.java:98)
at hudson.model.Executor.run(Executor.java:404)
Archiving artifacts
Recording test results
ERROR: Step ‘Publish JUnit test result report’ failed: No test report files 
were found. Configuration error?
[description-setter] Could not determine description.
Putting comment on the pull request
Email was triggered for: Failure - Any
Sending email 

[jira] [Commented] (ZOOKEEPER-2709) Clarify documentation around "auth" ACL scheme

2017-03-06 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2709?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898804#comment-15898804
 ] 

ASF GitHub Bot commented on ZOOKEEPER-2709:
---

Github user hanm commented on a diff in the pull request:

https://github.com/apache/zookeeper/pull/182#discussion_r104595517
  
--- Diff: src/docs/src/documentation/content/xdocs/zookeeperProgrammers.xml 
---
@@ -899,9 +899,12 @@
 single id, anyone, that represents
 anyone.
 
-auth doesn't
-use any id, represents any authenticated
-user.
+auth is a 
convenience
+scheme which defaults to the currently-authenticated user and 
scheme.
+Any ID which is provided using this scheme is ignored by ZooKeeper.
--- End diff --

Thanks for the patch, it is a good improvement on doc.

I think the ID here refers to the id of the scheme:id pair of the ID object 
in the ACL, correct? Mentioning this because the auth scheme is also referenced 
in command line where people can do 'setAcl /node auth:username:password:crdwa' 
in which case the username (sometimes overloaded as id) is required. 



> Clarify documentation around "auth" ACL scheme
> --
>
> Key: ZOOKEEPER-2709
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2709
> Project: ZooKeeper
>  Issue Type: Task
>  Components: documentation
>Reporter: Josh Elser
>Priority: Minor
>
> We recently found up in HBASE-17717 that we were incorrectly setting an ACL 
> on our "sensitive" znodes after the output of {{getACL}} on these nodes 
> didn't match what was expected.
> In referencing the documentation about how the {{auth}} ACL scheme was 
> supposed to work, it was unclear if it was a ZooKeeper bug or an HBase bug. 
> After reading some ZooKeeper code, we found that it was an HBase bug, but it 
> would be nice to clarify the docs around this ACL scheme.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[GitHub] zookeeper pull request #182: ZOOKEEPER-2709 Clarify documentation around the...

2017-03-06 Thread hanm
Github user hanm commented on a diff in the pull request:

https://github.com/apache/zookeeper/pull/182#discussion_r104595517
  
--- Diff: src/docs/src/documentation/content/xdocs/zookeeperProgrammers.xml 
---
@@ -899,9 +899,12 @@
 single id, anyone, that represents
 anyone.
 
-auth doesn't
-use any id, represents any authenticated
-user.
+auth is a 
convenience
+scheme which defaults to the currently-authenticated user and 
scheme.
+Any ID which is provided using this scheme is ignored by ZooKeeper.
--- End diff --

Thanks for the patch, it is a good improvement on doc.

I think the ID here refers to the id of the scheme:id pair of the ID object 
in the ACL, correct? Mentioning this because the auth scheme is also referenced 
in command line where people can do 'setAcl /node auth:username:password:crdwa' 
in which case the username (sometimes overloaded as id) is required. 



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[jira] [Commented] (ZOOKEEPER-2693) DOS attack on wchp/wchc four letter words (4lw)

2017-03-06 Thread Rakesh R (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2693?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898792#comment-15898792
 ] 

Rakesh R commented on ZOOKEEPER-2693:
-

I will merge this shortly.

> DOS attack on wchp/wchc four letter words (4lw)
> ---
>
> Key: ZOOKEEPER-2693
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2693
> Project: ZooKeeper
>  Issue Type: Bug
>  Components: security, server
>Affects Versions: 3.4.0, 3.5.1, 3.5.2
>Reporter: Patrick Hunt
>Assignee: Michael Han
>Priority: Blocker
> Fix For: 3.4.10, 3.5.3
>
> Attachments: ZOOKEEPER-2693-01.patch
>
>
> The wchp/wchc four letter words can be exploited in a DOS attack on the ZK 
> client port - typically 2181. The following POC attack was recently published 
> on the web:
> https://webcache.googleusercontent.com/search?q=cache:_CNGIz10PRYJ:https://www.exploit-db.com/exploits/41277/+=14=en=clnk=us
> The most straightforward way to block this attack is to not allow access to 
> the client port to non-trusted clients - i.e. firewall the ZooKeeper service 
> and only allow access to trusted applications using it for coordination.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[jira] [Commented] (ZOOKEEPER-2665) Port QA github pull request build to branch 3.4 and 3.5

2017-03-06 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2665?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898762#comment-15898762
 ] 

ASF GitHub Bot commented on ZOOKEEPER-2665:
---

Github user hanm commented on the issue:

https://github.com/apache/zookeeper/pull/165
  
I think it is fine to leave the names as they are for now and later update 
scripts for all branches all together. 

@eolivelli - are there any specific changes you made on top of 
ZOOKEEPER-2624 while porting the script to branch-3.5 and 3.4? 


> Port QA github pull request build to branch 3.4 and 3.5
> ---
>
> Key: ZOOKEEPER-2665
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2665
> Project: ZooKeeper
>  Issue Type: Test
>  Components: build
>Reporter: Flavio Junqueira
> Fix For: 3.5.3, 3.4.11
>
>
> We have QA build for pull requests against master but not against branches 
> 3.4 and 3.5. We need to port the necessary wiring to do it, it shouldn't be 
> difficult.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[GitHub] zookeeper issue #165: ZOOKEEPER-2665 Port QA github pull request build to br...

2017-03-06 Thread hanm
Github user hanm commented on the issue:

https://github.com/apache/zookeeper/pull/165
  
I think it is fine to leave the names as they are for now and later update 
scripts for all branches all together. 

@eolivelli - are there any specific changes you made on top of 
ZOOKEEPER-2624 while porting the script to branch-3.5 and 3.4? 


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[jira] [Commented] (ZOOKEEPER-2693) DOS attack on wchp/wchc four letter words (4lw)

2017-03-06 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2693?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898753#comment-15898753
 ] 

ASF GitHub Bot commented on ZOOKEEPER-2693:
---

Github user rakeshadr commented on the issue:

https://github.com/apache/zookeeper/pull/183
  
Thanks @hanm. +1 LGTM


> DOS attack on wchp/wchc four letter words (4lw)
> ---
>
> Key: ZOOKEEPER-2693
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2693
> Project: ZooKeeper
>  Issue Type: Bug
>  Components: security, server
>Affects Versions: 3.4.0, 3.5.1, 3.5.2
>Reporter: Patrick Hunt
>Assignee: Michael Han
>Priority: Blocker
> Fix For: 3.4.10, 3.5.3
>
> Attachments: ZOOKEEPER-2693-01.patch
>
>
> The wchp/wchc four letter words can be exploited in a DOS attack on the ZK 
> client port - typically 2181. The following POC attack was recently published 
> on the web:
> https://webcache.googleusercontent.com/search?q=cache:_CNGIz10PRYJ:https://www.exploit-db.com/exploits/41277/+=14=en=clnk=us
> The most straightforward way to block this attack is to not allow access to 
> the client port to non-trusted clients - i.e. firewall the ZooKeeper service 
> and only allow access to trusted applications using it for coordination.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[jira] [Commented] (ZOOKEEPER-236) SSL Support for Atomic Broadcast protocol

2017-03-06 Thread Powell Molleti (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-236?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898735#comment-15898735
 ] 

Powell Molleti commented on ZOOKEEPER-236:
--

Hi Abe,

I have attempted to work on providing the same support last year for branch-3.5 
and I have created the pull request for what I have so far for you to look at: 
https://github.com/apache/zookeeper/pull/185
Readme: https://github.com/geek101/zookeeper/blob/branch-3.4/README_SSL.md 

I definitely did not consider upgrading non SSL cluster to an SSL one for ZAB 
and FLE, glad that you brought that up. 

I am attempting to combine these changes and Netty changes I have for Trunk. 
You can find them here:
https://github.com/geek101/zookeeper/pull/6

Let me know what you think.
thanks
Powell.




> SSL Support for Atomic Broadcast protocol
> -
>
> Key: ZOOKEEPER-236
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-236
> Project: ZooKeeper
>  Issue Type: New Feature
>  Components: quorum, server
>Reporter: Benjamin Reed
>Assignee: Abraham Fine
>Priority: Minor
>
> We should have the ability to use SSL to authenticate and encrypt the traffic 
> between ZooKeeper servers. For the most part this is a very easy change. We 
> would probably only want to support this for TCP based leader elections.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


Failed: ZOOKEEPER- PreCommit Build #382

2017-03-06 Thread Apache Jenkins Server
Build: https://builds.apache.org/job/PreCommit-ZOOKEEPER-github-pr-build/382/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 1.30 KB...]
Done: 116
  Compressing objects
Done: 208622
  Writing objects
Done: 254
  remote: Resolving deltas
  remote: Updating references
Merging refs/tags/changes/382
 > git rev-parse refs/tags/changes/382^{commit} # timeout=10
 > git merge 30450268282d307e04c684dbcb0abb9c9bc59dca # timeout=10
 > git rev-parse branch-3.5^{commit} # timeout=10
Checking out Revision 30450268282d307e04c684dbcb0abb9c9bc59dca (branch-3.5)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 30450268282d307e04c684dbcb0abb9c9bc59dca
 > git rev-parse origin/branch-3.5^{commit} # timeout=10
 > git rev-list 6d9fc04c052adbc791c63f3f00c816fb8e56 # timeout=10
No emails were triggered.
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
[PreCommit-ZOOKEEPER-github-pr-build] $ /bin/bash 
/tmp/hudson1767911739275420830.sh
/home/jenkins/tools/java/latest1.7/bin/java
java version "1.7.0_80"
Java(TM) SE Runtime Environment (build 1.7.0_80-b15)
Java HotSpot(TM) 64-Bit Server VM (build 24.80-b11, mixed mode)
core file size  (blocks, -c) 0
data seg size   (kbytes, -d) unlimited
scheduling priority (-e) 0
file size   (blocks, -f) unlimited
pending signals (-i) 386177
max locked memory   (kbytes, -l) 64
max memory size (kbytes, -m) unlimited
open files  (-n) 6
pipe size(512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority  (-r) 0
stack size  (kbytes, -s) 8192
cpu time   (seconds, -t) unlimited
max user processes  (-u) 10240
virtual memory  (kbytes, -v) unlimited
file locks  (-x) unlimited
Buildfile: 
/home/jenkins/jenkins-slave/workspace/PreCommit-ZOOKEEPER-github-pr-build/build.xml

BUILD FAILED
Target "qa-test-pullrequest" does not exist in the project "ZooKeeper". 

Total time: 0 seconds
Build step 'Execute shell' marked build as failure
Archiving artifacts
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Recording test results
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
ERROR: Step ‘Publish JUnit test result report’ failed: No test report files 
were found. Configuration error?
[description-setter] Could not determine description.
Putting comment on the pull request
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7



###
## FAILED TESTS (if any) 
##
No tests ran.

[GitHub] zookeeper pull request #185: Branch 3.5 FLE and ZAB SSL socket support [DO N...

2017-03-06 Thread geek101
GitHub user geek101 opened a pull request:

https://github.com/apache/zookeeper/pull/185

Branch 3.5 FLE and ZAB SSL socket support [DO NOT MERGE]

# Zookeeper Dynamic Quorum SSL (work in progress)

Provides SSL for Leader Election and ZAB i.e ports 3888 and 2888.

Goal of this patch is to build on top of SSL changes for 
[branch-3.4](https://github.com/geek101/zookeeper/blob/branch-3.4/README_SSL.md)
 and in 
the spirit of branch-3.5 provide support for dynamic reconfiguration, i.e 
do 
not violate safety and liveliness even when SSL is enabled.

### TODO

* CA based cert verification currently has no support for changing CA in a 
fault-tolerant way. Alternative to changing CA is to revoke the quorum peer 
to be removed via CRL(s) hence this needs more discussion/debate perhaps. 

* Needs test framework and/or test cases to verify new functionality, this 
is 
probably a significant amount of work gating this patch among other things.

### Self Signed Certs How To

The idea here is to propagate the new member(s) certificate fingerprint(s) 
via the secure channel to the quorum via the reconfig() API.

Each quorum peer will have its self-signed cert finger print (typically 
like 
a SHA-256 digest) embedded into its server string.

```
server.1=125.23.63.23:2780:2783:participant:cert:SHA-256-;2791
```

We also have support for both plain and secure port for ZookeeperServer 
hence 
the config has been extended to reflect that as follows.

```
server.1=125.23.63.23:2780:2783:participant:cert:SHA-256-;plain:2791;
secure:2891
```

A reconfiguration operation would work by submitting the new server 
config (or the new quorum list) to reconfig() API.

This has been tested to work with the current state of the patch.

### Some details

* 
[X509Util](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/common/X509Util.java)
 
becomes first class citizen and 
[QuorumX509Util](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/server/quorum/util/QuorumX509Util.java)
 and 
[ServerX509Util](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/server/util/ServerX509Util.java)
extend it.
* 
[ZKConfig](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/common/ZKConfig.java)
 
becomes an abstract class and 
[QuorumSslConfig](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/server/quorum/QuorumPeerConfig.java)
 and 

[ZookeeperServerConfig](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/server/ZookeeperServerConfig.java)
 implement it.
* 
[QuorumServer](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/server/quorum/QuorumPeer.java#L278)
 gets the parsing code for the extra cert information and gets 
help from new 
[SSLCertCfg](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/SSLCertCfg.java)
 class. Dynamic config generation is handled 
transparently due to this.
* 
[ZKDynamicX509TrustManager](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/server/quorum/util/ZKDynamicX509TrustManager.java)
 handles the dynamic verification of certs and 
gets help from QuorumPeer's new API, 

[getQuorumServerFingerPrintByElectionAddress()](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/server/quorum/QuorumPeer.java#L1642)
 and 

[getQuorumServerFingerPrintByCert()](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/server/quorum/QuorumPeer.java#L1661)
* Support for a Quorum peer to also be authenticated as a [ZK 
client](https://github.com/geek101/zookeeper/blob/branch-3.5-ssl-review5/src/java/main/org/apache/zookeeper/server/util/ServerX509Util.java#L62)
 (this 
will be removed if it breaks security and or is not needed)

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/geek101/zookeeper branch-3.5-ssl-review5

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/zookeeper/pull/185.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #185


commit 9fea6674fbcaead59e090c28dbd7a59e864c442e
Author: Powell Molleti 
Date:   2016-08-14T02:27:03Z

SSL support for ZAB and FLE.

Code for dynamic reconfig() and SSL support.

commit 

Failed: ZOOKEEPER- PreCommit Build #381

2017-03-06 Thread Apache Jenkins Server
Build: https://builds.apache.org/job/PreCommit-ZOOKEEPER-github-pr-build/381/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 1.30 KB...]
Done: 31
  Compressing objects
Done: 0
  Writing objects
Done: 34
  remote: Resolving deltas
  remote: Updating references
Merging refs/tags/changes/381
 > git rev-parse refs/tags/changes/381^{commit} # timeout=10
 > git merge d060ddcfe9f3b24eebd7b2b0742be3070a1f245f # timeout=10
 > git rev-parse branch-3.4^{commit} # timeout=10
Checking out Revision d060ddcfe9f3b24eebd7b2b0742be3070a1f245f (branch-3.4)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f d060ddcfe9f3b24eebd7b2b0742be3070a1f245f
 > git rev-parse origin/branch-3.4^{commit} # timeout=10
 > git rev-list b26eaf3492a43821f648d8a8f87d8ac3488f1cef # timeout=10
No emails were triggered.
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
[PreCommit-ZOOKEEPER-github-pr-build] $ /bin/bash 
/tmp/hudson1943028976696691923.sh
/home/jenkins/tools/java/latest1.7/bin/java
java version "1.7.0_80"
Java(TM) SE Runtime Environment (build 1.7.0_80-b15)
Java HotSpot(TM) 64-Bit Server VM (build 24.80-b11, mixed mode)
core file size  (blocks, -c) 0
data seg size   (kbytes, -d) unlimited
scheduling priority (-e) 0
file size   (blocks, -f) unlimited
pending signals (-i) 386178
max locked memory   (kbytes, -l) 64
max memory size (kbytes, -m) unlimited
open files  (-n) 6
pipe size(512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority  (-r) 0
stack size  (kbytes, -s) 8192
cpu time   (seconds, -t) unlimited
max user processes  (-u) 10240
virtual memory  (kbytes, -v) unlimited
file locks  (-x) unlimited
Buildfile: 
/home/jenkins/jenkins-slave/workspace/PreCommit-ZOOKEEPER-github-pr-build/build.xml

BUILD FAILED
Target "qa-test-pullrequest" does not exist in the project "ZooKeeper". 

Total time: 0 seconds
Build step 'Execute shell' marked build as failure
Archiving artifacts
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Recording test results
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
ERROR: Step ?Publish JUnit test result report? failed: No test report files 
were found. Configuration error?
[description-setter] Could not determine description.
Putting comment on the pull request
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7



###
## FAILED TESTS (if any) 
##
No tests ran.

[jira] [Commented] (ZOOKEEPER-2693) DOS attack on wchp/wchc four letter words (4lw)

2017-03-06 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2693?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898656#comment-15898656
 ] 

ASF GitHub Bot commented on ZOOKEEPER-2693:
---

Github user hanm commented on a diff in the pull request:

https://github.com/apache/zookeeper/pull/183#discussion_r104579958
  
--- Diff: src/docs/src/documentation/content/xdocs/zookeeperAdmin.xml ---
@@ -1042,6 +1042,40 @@ server.3=zoo3:2888:3888
   
 
   
+
+  
+4lw.commands.whitelist
+
+
+  (Java system property: zookeeper.4lw.commands.whitelist)
+
+  New in 3.4.10:
+This property contains a list of comma separated
+Four Letter Words commands. 
It is introduced
+to provide fine grained control over the set of commands 
ZooKeeper can execute,
+so users can turn off certain commands if necessary.
+By default it contains all supported four letter word 
commands except "wchp" and "wchc",
+if the property is not specified. If the property is 
specified, then only commands listed
+in the whitelist are enabled.
+  
+
+  Here's an example of the configuration that enables 
stat, ruok, conf, and isro
+command while disabling the rest of Four Letter Words 
command:
+  
+4lw.commands.whitelist=stat, ruok, conf, isro
+  
+
+  Users can also use asterisk option so they don't have 
to include every command one by one in the list.
+As an example, this will enable all four letter word 
commands:
+  
+  
+4lw.commands.whitelist=*
+  
+
+
+  
+
 
--- End diff --

Included.


> DOS attack on wchp/wchc four letter words (4lw)
> ---
>
> Key: ZOOKEEPER-2693
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2693
> Project: ZooKeeper
>  Issue Type: Bug
>  Components: security, server
>Affects Versions: 3.4.0, 3.5.1, 3.5.2
>Reporter: Patrick Hunt
>Assignee: Michael Han
>Priority: Blocker
> Fix For: 3.4.10, 3.5.3
>
> Attachments: ZOOKEEPER-2693-01.patch
>
>
> The wchp/wchc four letter words can be exploited in a DOS attack on the ZK 
> client port - typically 2181. The following POC attack was recently published 
> on the web:
> https://webcache.googleusercontent.com/search?q=cache:_CNGIz10PRYJ:https://www.exploit-db.com/exploits/41277/+=14=en=clnk=us
> The most straightforward way to block this attack is to not allow access to 
> the client port to non-trusted clients - i.e. firewall the ZooKeeper service 
> and only allow access to trusted applications using it for coordination.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[GitHub] zookeeper pull request #183: ZOOKEEPER-2693: DOS attack on wchp/wchc four le...

2017-03-06 Thread hanm
Github user hanm commented on a diff in the pull request:

https://github.com/apache/zookeeper/pull/183#discussion_r104579958
  
--- Diff: src/docs/src/documentation/content/xdocs/zookeeperAdmin.xml ---
@@ -1042,6 +1042,40 @@ server.3=zoo3:2888:3888
   
 
   
+
+  
+4lw.commands.whitelist
+
+
+  (Java system property: zookeeper.4lw.commands.whitelist)
+
+  New in 3.4.10:
+This property contains a list of comma separated
+Four Letter Words commands. 
It is introduced
+to provide fine grained control over the set of commands 
ZooKeeper can execute,
+so users can turn off certain commands if necessary.
+By default it contains all supported four letter word 
commands except "wchp" and "wchc",
+if the property is not specified. If the property is 
specified, then only commands listed
+in the whitelist are enabled.
+  
+
+  Here's an example of the configuration that enables 
stat, ruok, conf, and isro
+command while disabling the rest of Four Letter Words 
command:
+  
+4lw.commands.whitelist=stat, ruok, conf, isro
+  
+
+  Users can also use asterisk option so they don't have 
to include every command one by one in the list.
+As an example, this will enable all four letter word 
commands:
+  
+  
+4lw.commands.whitelist=*
+  
+
+
+  
+
 
--- End diff --

Included.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


Failed: ZOOKEEPER- PreCommit Build #380

2017-03-06 Thread Apache Jenkins Server
Build: https://builds.apache.org/job/PreCommit-ZOOKEEPER-github-pr-build/380/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 1.30 KB...]
Done: 26
  Compressing objects
Done: 0
  Writing objects
Done: 29
  remote: Resolving deltas
  remote: Updating references
Merging refs/tags/changes/380
 > git rev-parse refs/tags/changes/380^{commit} # timeout=10
 > git merge 937c39ac42c461e99274dea445f60cc18aea9102 # timeout=10
 > git rev-parse branch-3.5^{commit} # timeout=10
Checking out Revision 692e33ae8384b817dc492da7565c2d27738e5d2f (branch-3.5)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 692e33ae8384b817dc492da7565c2d27738e5d2f
 > git rev-parse origin/branch-3.5^{commit} # timeout=10
 > git rev-list 6d9fc04c052adbc791c63f3f00c816fb8e56 # timeout=10
No emails were triggered.
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
[PreCommit-ZOOKEEPER-github-pr-build] $ /bin/bash 
/tmp/hudson1545427153448805323.sh
/home/jenkins/tools/java/latest1.7/bin/java
java version "1.7.0_80"
Java(TM) SE Runtime Environment (build 1.7.0_80-b15)
Java HotSpot(TM) 64-Bit Server VM (build 24.80-b11, mixed mode)
core file size  (blocks, -c) 0
data seg size   (kbytes, -d) unlimited
scheduling priority (-e) 0
file size   (blocks, -f) unlimited
pending signals (-i) 386177
max locked memory   (kbytes, -l) 64
max memory size (kbytes, -m) unlimited
open files  (-n) 6
pipe size(512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority  (-r) 0
stack size  (kbytes, -s) 8192
cpu time   (seconds, -t) unlimited
max user processes  (-u) 10240
virtual memory  (kbytes, -v) unlimited
file locks  (-x) unlimited
Buildfile: 
/home/jenkins/jenkins-slave/workspace/PreCommit-ZOOKEEPER-github-pr-build/build.xml

BUILD FAILED
Target "qa-test-pullrequest" does not exist in the project "ZooKeeper". 

Total time: 0 seconds
Build step 'Execute shell' marked build as failure
Archiving artifacts
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Recording test results
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
ERROR: Step ‘Publish JUnit test result report’ failed: No test report files 
were found. Configuration error?
[description-setter] Could not determine description.
Putting comment on the pull request
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7



###
## FAILED TESTS (if any) 
##
No tests ran.

ZooKeeper_branch34_jdk7 - Build # 1429 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper_branch34_jdk7/1429/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 25.94 MB...]
[junit] 2017-03-07 02:46:15,918 [myid:] - INFO  
[main:SessionTrackerImpl@225] - Shutting down
[junit] 2017-03-07 02:46:15,918 [myid:] - INFO  
[main:PrepRequestProcessor@764] - Shutting down
[junit] 2017-03-07 02:46:15,919 [myid:] - INFO  
[main:SyncRequestProcessor@208] - Shutting down
[junit] 2017-03-07 02:46:15,919 [myid:] - INFO  [ProcessThread(sid:0 
cport:11221)::PrepRequestProcessor@143] - PrepRequestProcessor exited loop!
[junit] 2017-03-07 02:46:15,919 [myid:] - INFO  
[SyncThread:0:SyncRequestProcessor@186] - SyncRequestProcessor exited!
[junit] 2017-03-07 02:46:15,920 [myid:] - INFO  
[main:FinalRequestProcessor@402] - shutdown of request processor complete
[junit] 2017-03-07 02:46:15,920 [myid:] - INFO  
[main:FourLetterWordMain@62] - connecting to 127.0.0.1 11221
[junit] 2017-03-07 02:46:15,921 [myid:] - INFO  [main:JMXEnv@147] - 
ensureOnly:[]
[junit] 2017-03-07 02:46:15,923 [myid:] - INFO  [main:ClientBase@445] - 
STARTING server
[junit] 2017-03-07 02:46:15,923 [myid:] - INFO  [main:ClientBase@366] - 
CREATING server instance 127.0.0.1:11221
[junit] 2017-03-07 02:46:15,924 [myid:] - INFO  
[main:NIOServerCnxnFactory@89] - binding to port 0.0.0.0/0.0.0.0:11221
[junit] 2017-03-07 02:46:15,924 [myid:] - INFO  [main:ClientBase@341] - 
STARTING server instance 127.0.0.1:11221
[junit] 2017-03-07 02:46:15,924 [myid:] - INFO  [main:ZooKeeperServer@173] 
- Created server with tickTime 3000 minSessionTimeout 6000 maxSessionTimeout 
6 datadir 
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34_jdk7/build/test/tmp/test3866780131637280785.junit.dir/version-2
 snapdir 
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34_jdk7/build/test/tmp/test3866780131637280785.junit.dir/version-2
[junit] 2017-03-07 02:46:15,930 [myid:] - ERROR [main:ZooKeeperServer@472] 
- ZKShutdownHandler is not registered, so ZooKeeper server won't take any 
action on ERROR or SHUTDOWN server state changes
[junit] 2017-03-07 02:46:15,931 [myid:] - INFO  
[main:FourLetterWordMain@62] - connecting to 127.0.0.1 11221
[junit] 2017-03-07 02:46:15,931 [myid:] - INFO  
[NIOServerCxn.Factory:0.0.0.0/0.0.0.0:11221:NIOServerCnxnFactory@192] - 
Accepted socket connection from /127.0.0.1:48224
[junit] 2017-03-07 02:46:15,932 [myid:] - INFO  
[NIOServerCxn.Factory:0.0.0.0/0.0.0.0:11221:NIOServerCnxn@838] - Processing 
stat command from /127.0.0.1:48224
[junit] 2017-03-07 02:46:15,933 [myid:] - INFO  
[Thread-4:NIOServerCnxn$StatCommand@674] - Stat command output
[junit] 2017-03-07 02:46:15,933 [myid:] - INFO  
[Thread-4:NIOServerCnxn@1019] - Closed socket connection for client 
/127.0.0.1:48224 (no session established for client)
[junit] 2017-03-07 02:46:15,933 [myid:] - INFO  [main:JMXEnv@230] - 
ensureParent:[InMemoryDataTree, StandaloneServer_port]
[junit] 2017-03-07 02:46:15,936 [myid:] - INFO  [main:JMXEnv@247] - 
expect:InMemoryDataTree
[junit] 2017-03-07 02:46:15,936 [myid:] - INFO  [main:JMXEnv@251] - 
found:InMemoryDataTree 
org.apache.ZooKeeperService:name0=StandaloneServer_port11221,name1=InMemoryDataTree
[junit] 2017-03-07 02:46:15,936 [myid:] - INFO  [main:JMXEnv@247] - 
expect:StandaloneServer_port
[junit] 2017-03-07 02:46:15,936 [myid:] - INFO  [main:JMXEnv@251] - 
found:StandaloneServer_port 
org.apache.ZooKeeperService:name0=StandaloneServer_port11221
[junit] 2017-03-07 02:46:15,937 [myid:] - INFO  
[main:JUnit4ZKTestRunner$LoggedInvokeMethod@58] - Memory used 35678
[junit] 2017-03-07 02:46:15,937 [myid:] - INFO  
[main:JUnit4ZKTestRunner$LoggedInvokeMethod@63] - Number of threads 20
[junit] 2017-03-07 02:46:15,937 [myid:] - INFO  
[main:JUnit4ZKTestRunner$LoggedInvokeMethod@78] - FINISHED TEST METHOD testQuota
[junit] 2017-03-07 02:46:15,938 [myid:] - INFO  [main:ClientBase@522] - 
tearDown starting
[junit] 2017-03-07 02:46:15,999 [myid:] - INFO  [main:ZooKeeper@684] - 
Session: 0x15aa6a8f7bb closed
[junit] 2017-03-07 02:46:15,999 [myid:] - INFO  [main:ClientBase@492] - 
STOPPING server
[junit] 2017-03-07 02:46:15,999 [myid:] - INFO  
[NIOServerCxn.Factory:0.0.0.0/0.0.0.0:11221:NIOServerCnxnFactory@219] - 
NIOServerCnxn factory exited run method
[junit] 2017-03-07 02:46:15,999 [myid:] - INFO  
[main-EventThread:ClientCnxn$EventThread@519] - EventThread shut down for 
session: 0x15aa6a8f7bb
[junit] 2017-03-07 02:46:16,000 [myid:] - INFO  [main:ZooKeeperServer@505] 
- shutting down
[junit] 2017-03-07 02:46:16,000 [myid:] - ERROR [main:ZooKeeperServer@472] 
- ZKShutdownHandler is not registered, so ZooKeeper server won't take any 
action on ERROR or SHUTDOWN server state changes
[junit] 2017-03-07 02:46:16,000 

[jira] [Commented] (ZOOKEEPER-2693) DOS attack on wchp/wchc four letter words (4lw)

2017-03-06 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2693?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898621#comment-15898621
 ] 

ASF GitHub Bot commented on ZOOKEEPER-2693:
---

Github user rakeshadr commented on a diff in the pull request:

https://github.com/apache/zookeeper/pull/183#discussion_r104572803
  
--- Diff: src/docs/src/documentation/content/xdocs/zookeeperAdmin.xml ---
@@ -1042,6 +1042,40 @@ server.3=zoo3:2888:3888
   
 
   
+
+  
+4lw.commands.whitelist
+
+
+  (Java system property: zookeeper.4lw.commands.whitelist)
+
+  New in 3.4.10:
+This property contains a list of comma separated
+Four Letter Words commands. 
It is introduced
+to provide fine grained control over the set of commands 
ZooKeeper can execute,
+so users can turn off certain commands if necessary.
+By default it contains all supported four letter word 
commands except "wchp" and "wchc",
+if the property is not specified. If the property is 
specified, then only commands listed
+in the whitelist are enabled.
+  
+
+  Here's an example of the configuration that enables 
stat, ruok, conf, and isro
+command while disabling the rest of Four Letter Words 
command:
+  
+4lw.commands.whitelist=stat, ruok, conf, isro
+  
+
+  Users can also use asterisk option so they don't have 
to include every command one by one in the list.
+As an example, this will enable all four letter word 
commands:
+  
+  
+4lw.commands.whitelist=*
+  
+
+
+  
+
 
--- End diff --

The below section is not included in br-3.4 patch, can we include this also?
```
+
+  Publicly accessible deployment
+  
+
+  A ZooKeeper ensemble is expected to operate in a trusted 
computing environment.
+  It is thus recommended to deploy ZooKeeper behind a firewall.
+
+  
+
```


> DOS attack on wchp/wchc four letter words (4lw)
> ---
>
> Key: ZOOKEEPER-2693
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2693
> Project: ZooKeeper
>  Issue Type: Bug
>  Components: security, server
>Affects Versions: 3.4.0, 3.5.1, 3.5.2
>Reporter: Patrick Hunt
>Assignee: Michael Han
>Priority: Blocker
> Fix For: 3.4.10, 3.5.3
>
> Attachments: ZOOKEEPER-2693-01.patch
>
>
> The wchp/wchc four letter words can be exploited in a DOS attack on the ZK 
> client port - typically 2181. The following POC attack was recently published 
> on the web:
> https://webcache.googleusercontent.com/search?q=cache:_CNGIz10PRYJ:https://www.exploit-db.com/exploits/41277/+=14=en=clnk=us
> The most straightforward way to block this attack is to not allow access to 
> the client port to non-trusted clients - i.e. firewall the ZooKeeper service 
> and only allow access to trusted applications using it for coordination.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[GitHub] zookeeper pull request #183: ZOOKEEPER-2693: DOS attack on wchp/wchc four le...

2017-03-06 Thread rakeshadr
Github user rakeshadr commented on a diff in the pull request:

https://github.com/apache/zookeeper/pull/183#discussion_r104572803
  
--- Diff: src/docs/src/documentation/content/xdocs/zookeeperAdmin.xml ---
@@ -1042,6 +1042,40 @@ server.3=zoo3:2888:3888
   
 
   
+
+  
+4lw.commands.whitelist
+
+
+  (Java system property: zookeeper.4lw.commands.whitelist)
+
+  New in 3.4.10:
+This property contains a list of comma separated
+Four Letter Words commands. 
It is introduced
+to provide fine grained control over the set of commands 
ZooKeeper can execute,
+so users can turn off certain commands if necessary.
+By default it contains all supported four letter word 
commands except "wchp" and "wchc",
+if the property is not specified. If the property is 
specified, then only commands listed
+in the whitelist are enabled.
+  
+
+  Here's an example of the configuration that enables 
stat, ruok, conf, and isro
+command while disabling the rest of Four Letter Words 
command:
+  
+4lw.commands.whitelist=stat, ruok, conf, isro
+  
+
+  Users can also use asterisk option so they don't have 
to include every command one by one in the list.
+As an example, this will enable all four letter word 
commands:
+  
+  
+4lw.commands.whitelist=*
+  
+
+
+  
+
 
--- End diff --

The below section is not included in br-3.4 patch, can we include this also?
```
+
+  Publicly accessible deployment
+  
+
+  A ZooKeeper ensemble is expected to operate in a trusted 
computing environment.
+  It is thus recommended to deploy ZooKeeper behind a firewall.
+
+  
+
```


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


ZooKeeper_branch34 - Build # 1858 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper_branch34/1858/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 4.06 KB...]
  collisions:0 txqueuelen:0 
  RX bytes:94947 (94.9 KB)  TX bytes:651300 (651.3 KB)

core file size  (blocks, -c) 0
data seg size   (kbytes, -d) unlimited
scheduling priority (-e) 0
file size   (blocks, -f) unlimited
pending signals (-i) 386177
max locked memory   (kbytes, -l) 64
max memory size (kbytes, -m) unlimited
open files  (-n) 6
pipe size(512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority  (-r) 0
stack size  (kbytes, -s) 8192
cpu time   (seconds, -t) unlimited
max user processes  (-u) 10240
virtual memory  (kbytes, -v) unlimited
file locks  (-x) unlimited
6
/home/jenkins/tools/ant/latest/bin/ant clean
Exception in thread "main" java.lang.UnsupportedClassVersionError: 
org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:800)
at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:449)
at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
Exception in thread "main" java.lang.UnsupportedClassVersionError: 
org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:800)
at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:449)
at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
mv: cannot stat 'build/*.tar.gz': No such file or directory
mv: cannot stat 'build/*.jar': No such file or directory
mv: cannot stat 'build/test/findbugs': No such file or directory
mv: cannot stat 'build/docs/api': No such file or directory
Build Failed
Build step 'Execute shell' marked build as failure
Recording test results
ERROR: Step ?Publish JUnit test result report? failed: No test report files 
were found. Configuration error?
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any



###
## FAILED TESTS (if any) 
##
No tests ran.

ZooKeeper-trunk - Build # 3302 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper-trunk/3302/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 4.12 KB...]
POSIX message queues (bytes, -q) 819200
real-time priority  (-r) 0
stack size  (kbytes, -s) 8192
cpu time   (seconds, -t) unlimited
max user processes  (-u) 10240
virtual memory  (kbytes, -v) unlimited
file locks  (-x) unlimited
6
/home/jenkins/tools/ant/latest/bin/ant clean
Exception in thread "main" java.lang.UnsupportedClassVersionError: 
org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:800)
at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:449)
at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
Exception in thread "main" java.lang.UnsupportedClassVersionError: 
org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:800)
at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:449)
at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
mv: cannot stat 'build/*.tar.gz': No such file or directory
mv: cannot stat 'build/*.jar': No such file or directory
mv: cannot stat 'build/test/findbugs': No such file or directory
mv: cannot stat 'build/docs/api': No such file or directory
Build Failed
Build step 'Execute shell' marked build as failure
[FINDBUGS] Skipping publisher since build result is FAILURE
[WARNINGS] Skipping publisher since build result is FAILURE
Archiving artifacts
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Recording fingerprints
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Recording test results
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
ERROR: Step ?Publish JUnit test result report? failed: No test report files 
were found. Configuration error?
Publishing Javadoc
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7



###
## FAILED TESTS (if any) 
##
No tests ran.

[jira] [Commented] (ZOOKEEPER-236) SSL Support for Atomic Broadcast protocol

2017-03-06 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-236?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898359#comment-15898359
 ] 

ASF GitHub Bot commented on ZOOKEEPER-236:
--

GitHub user afine opened a pull request:

https://github.com/apache/zookeeper/pull/184

ZOOKEEPER-236: SSL Support for Atomic Broadcast protocol [DO NOT MERGE]

This is a work in progress, I wanted to get some feedback from the 
community while I worked on this. Please do not merge yet. Tests, 
documentation, and some cleanup still coming. 

This is a first pass at ssl support for the zookeeper quorum. It supports 
encrypting both leader election and normal operation.

Rolling upgrades are supported via port unification 
(`portUnification=true`). This should only be used while performing a rolling 
upgrade.

Some open questions:
- Anyone have any ideas for better names for the configuration options 
(`sslQuorum` and `portUnification` currently).
- I am using the same configuration that points to the truststore/keystore 
used for server <-> client ssl. Do they need to be separate?
- Is port unification the correct approach for rolling upgrades? Is the 
impact from the use of `BufferedSocket`s during the upgrade acceptable? See: 
http://stackoverflow.com/questions/25637039/detecting-ssl-connection-and-converting-socket-to-sslsocket
 
http://stackoverflow.com/questions/6559859/is-it-possible-to-change-plain-socket-to-sslsocket
- server <-> client ssl is implemented with netty. I did not feel that 
rewriting our server <-> server logic with netty was necessary given how easy 
ssl was to implement with standard java `SSLSocket`s. Any arguments to the 
contrary?

Thanks,
Abe

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/afine/zookeeper ZOOKEEPER-236

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/zookeeper/pull/184.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #184


commit db33552046dea7e8e850945da4f18d18644d8ee5
Author: Abraham Fine 
Date:   2017-03-06T23:12:59Z

ZOOKEEPER-236: SSL Support for Atomic Broadcast protocol




> SSL Support for Atomic Broadcast protocol
> -
>
> Key: ZOOKEEPER-236
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-236
> Project: ZooKeeper
>  Issue Type: New Feature
>  Components: quorum, server
>Reporter: Benjamin Reed
>Assignee: Abraham Fine
>Priority: Minor
>
> We should have the ability to use SSL to authenticate and encrypt the traffic 
> between ZooKeeper servers. For the most part this is a very easy change. We 
> would probably only want to support this for TCP based leader elections.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[GitHub] zookeeper pull request #184: ZOOKEEPER-236: SSL Support for Atomic Broadcast...

2017-03-06 Thread afine
GitHub user afine opened a pull request:

https://github.com/apache/zookeeper/pull/184

ZOOKEEPER-236: SSL Support for Atomic Broadcast protocol [DO NOT MERGE]

This is a work in progress, I wanted to get some feedback from the 
community while I worked on this. Please do not merge yet. Tests, 
documentation, and some cleanup still coming. 

This is a first pass at ssl support for the zookeeper quorum. It supports 
encrypting both leader election and normal operation.

Rolling upgrades are supported via port unification 
(`portUnification=true`). This should only be used while performing a rolling 
upgrade.

Some open questions:
- Anyone have any ideas for better names for the configuration options 
(`sslQuorum` and `portUnification` currently).
- I am using the same configuration that points to the truststore/keystore 
used for server <-> client ssl. Do they need to be separate?
- Is port unification the correct approach for rolling upgrades? Is the 
impact from the use of `BufferedSocket`s during the upgrade acceptable? See: 
http://stackoverflow.com/questions/25637039/detecting-ssl-connection-and-converting-socket-to-sslsocket
 
http://stackoverflow.com/questions/6559859/is-it-possible-to-change-plain-socket-to-sslsocket
- server <-> client ssl is implemented with netty. I did not feel that 
rewriting our server <-> server logic with netty was necessary given how easy 
ssl was to implement with standard java `SSLSocket`s. Any arguments to the 
contrary?

Thanks,
Abe

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/afine/zookeeper ZOOKEEPER-236

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/zookeeper/pull/184.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #184


commit db33552046dea7e8e850945da4f18d18644d8ee5
Author: Abraham Fine 
Date:   2017-03-06T23:12:59Z

ZOOKEEPER-236: SSL Support for Atomic Broadcast protocol




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


ZooKeeper_branch34_jdk8 - Build # 906 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper_branch34_jdk8/906/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 27.43 MB...]
[junit] 2017-03-06 23:09:40,245 [myid:] - INFO  
[main:SessionTrackerImpl@225] - Shutting down
[junit] 2017-03-06 23:09:40,245 [myid:] - INFO  
[main:PrepRequestProcessor@764] - Shutting down
[junit] 2017-03-06 23:09:40,246 [myid:] - INFO  
[main:SyncRequestProcessor@208] - Shutting down
[junit] 2017-03-06 23:09:40,246 [myid:] - INFO  [ProcessThread(sid:0 
cport:11221)::PrepRequestProcessor@143] - PrepRequestProcessor exited loop!
[junit] 2017-03-06 23:09:40,246 [myid:] - INFO  
[SyncThread:0:SyncRequestProcessor@186] - SyncRequestProcessor exited!
[junit] 2017-03-06 23:09:40,246 [myid:] - INFO  
[main:FinalRequestProcessor@402] - shutdown of request processor complete
[junit] 2017-03-06 23:09:40,246 [myid:] - INFO  
[main:FourLetterWordMain@62] - connecting to 127.0.0.1 11221
[junit] 2017-03-06 23:09:40,247 [myid:] - INFO  [main:JMXEnv@147] - 
ensureOnly:[]
[junit] 2017-03-06 23:09:40,248 [myid:] - INFO  [main:ClientBase@445] - 
STARTING server
[junit] 2017-03-06 23:09:40,248 [myid:] - INFO  [main:ClientBase@366] - 
CREATING server instance 127.0.0.1:11221
[junit] 2017-03-06 23:09:40,248 [myid:] - INFO  
[main:NIOServerCnxnFactory@89] - binding to port 0.0.0.0/0.0.0.0:11221
[junit] 2017-03-06 23:09:40,249 [myid:] - INFO  [main:ClientBase@341] - 
STARTING server instance 127.0.0.1:11221
[junit] 2017-03-06 23:09:40,249 [myid:] - INFO  [main:ZooKeeperServer@173] 
- Created server with tickTime 3000 minSessionTimeout 6000 maxSessionTimeout 
6 datadir 
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34_jdk8/build/test/tmp/test6550152831319626747.junit.dir/version-2
 snapdir 
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34_jdk8/build/test/tmp/test6550152831319626747.junit.dir/version-2
[junit] 2017-03-06 23:09:40,252 [myid:] - ERROR [main:ZooKeeperServer@472] 
- ZKShutdownHandler is not registered, so ZooKeeper server won't take any 
action on ERROR or SHUTDOWN server state changes
[junit] 2017-03-06 23:09:40,252 [myid:] - INFO  
[main:FourLetterWordMain@62] - connecting to 127.0.0.1 11221
[junit] 2017-03-06 23:09:40,252 [myid:] - INFO  
[NIOServerCxn.Factory:0.0.0.0/0.0.0.0:11221:NIOServerCnxnFactory@192] - 
Accepted socket connection from /127.0.0.1:36655
[junit] 2017-03-06 23:09:40,253 [myid:] - INFO  
[NIOServerCxn.Factory:0.0.0.0/0.0.0.0:11221:NIOServerCnxn@838] - Processing 
stat command from /127.0.0.1:36655
[junit] 2017-03-06 23:09:40,253 [myid:] - INFO  
[Thread-4:NIOServerCnxn$StatCommand@674] - Stat command output
[junit] 2017-03-06 23:09:40,253 [myid:] - INFO  
[Thread-4:NIOServerCnxn@1019] - Closed socket connection for client 
/127.0.0.1:36655 (no session established for client)
[junit] 2017-03-06 23:09:40,254 [myid:] - INFO  [main:JMXEnv@230] - 
ensureParent:[InMemoryDataTree, StandaloneServer_port]
[junit] 2017-03-06 23:09:40,255 [myid:] - INFO  [main:JMXEnv@247] - 
expect:InMemoryDataTree
[junit] 2017-03-06 23:09:40,256 [myid:] - INFO  [main:JMXEnv@251] - 
found:InMemoryDataTree 
org.apache.ZooKeeperService:name0=StandaloneServer_port11221,name1=InMemoryDataTree
[junit] 2017-03-06 23:09:40,256 [myid:] - INFO  [main:JMXEnv@247] - 
expect:StandaloneServer_port
[junit] 2017-03-06 23:09:40,256 [myid:] - INFO  [main:JMXEnv@251] - 
found:StandaloneServer_port 
org.apache.ZooKeeperService:name0=StandaloneServer_port11221
[junit] 2017-03-06 23:09:40,256 [myid:] - INFO  
[main:JUnit4ZKTestRunner$LoggedInvokeMethod@58] - Memory used 35517
[junit] 2017-03-06 23:09:40,256 [myid:] - INFO  
[main:JUnit4ZKTestRunner$LoggedInvokeMethod@63] - Number of threads 20
[junit] 2017-03-06 23:09:40,257 [myid:] - INFO  
[main:JUnit4ZKTestRunner$LoggedInvokeMethod@78] - FINISHED TEST METHOD testQuota
[junit] 2017-03-06 23:09:40,257 [myid:] - INFO  [main:ClientBase@522] - 
tearDown starting
[junit] 2017-03-06 23:09:40,331 [myid:] - INFO  [main:ZooKeeper@684] - 
Session: 0x15aa5e2ab22 closed
[junit] 2017-03-06 23:09:40,332 [myid:] - INFO  [main:ClientBase@492] - 
STOPPING server
[junit] 2017-03-06 23:09:40,332 [myid:] - INFO  
[main-EventThread:ClientCnxn$EventThread@519] - EventThread shut down for 
session: 0x15aa5e2ab22
[junit] 2017-03-06 23:09:40,332 [myid:] - INFO  
[NIOServerCxn.Factory:0.0.0.0/0.0.0.0:11221:NIOServerCnxnFactory@219] - 
NIOServerCnxn factory exited run method
[junit] 2017-03-06 23:09:40,332 [myid:] - INFO  [main:ZooKeeperServer@505] 
- shutting down
[junit] 2017-03-06 23:09:40,332 [myid:] - ERROR [main:ZooKeeperServer@472] 
- ZKShutdownHandler is not registered, so ZooKeeper server won't take any 
action on ERROR or SHUTDOWN server state changes
[junit] 2017-03-06 23:09:40,332 

Apache ZooKeeper 3.5.3-beta Release Plan

2017-03-06 Thread Michael Han
Hi all,

We all know that a stable 3.5 release is long awaited by community.
Previously we were on hold because of a security related issue
 around dynamic
reconfiguration and most recently a CVE
 around four letter
words. Now with both issues resolved in branch-3.5, I think we are ready to
move forward with 3.5.3 beta release and hopefully in near future, ship the
stable 3.5 release after this. So I am taking a stab here to start the
discussion on the plan of moving 3.5.3-beta forward.

Currently there are  six blocker issues

targeting 3.5.3:
ZOOKEEPER-2693 :
already resolved for branch-3.5.  The issue is still open because of
remaining work for branch-3.4.
ZOOKEEPER-761 :
already resolved for branch-3.5. The issue is still open because of some
potential changes required for branch-3.4.

As for the remaining issues marked as blocker, I'd like to propose we push
them to next release because these issues are not regressions - unless we
think some of them are absolutely required to get resolved for 3.5.3.
ZOOKEEPER-2317 
ZOOKEEPER-2159 
ZOOKEEPER-1549 
ZOOKEEPER-1159 

I will start doing the work to defer all JIRA issues targeting 3.5.3 to
3.5.4 by end of this week (*3/10*) if no objections. After that will cut a
RC build for 3.5.3.

Please let me know what you think about this plan and any concerns /
comments are welcome.

-- 
Cheers
Michael.


using java 8 code

2017-03-06 Thread Benjamin Reed
have people given thought about moving to java8? i'm really not that
excited about moving to java8, but we are running into libraries that
we want to use that are compiled with java8.

ben


[jira] [Updated] (ZOOKEEPER-2314) Improvements to SASL

2017-03-06 Thread Michael Han (JIRA)

 [ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2314?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Han updated ZOOKEEPER-2314:
---
Priority: Major  (was: Blocker)

> Improvements to SASL
> 
>
> Key: ZOOKEEPER-2314
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2314
> Project: ZooKeeper
>  Issue Type: Improvement
>  Components: documentation
>Affects Versions: 3.4.6, 3.5.1
>Reporter: Flavio Junqueira
>Assignee: Flavio Junqueira
> Fix For: 3.5.3, 3.6.0, 3.4.11
>
>
> Points that occur to me right now:
> # The login object in ZooKeeperSaslClient is static, which means that if you 
> try to create another client for tests, the login object will be the first 
> one you've set for all runs. I've experienced this with 3.4.6.
> # There are a number of properties spread across the code that do not appear 
> in the docs. For example, zookeeper.allowSaslFailedClients isn't documented 
> afaict.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[ANNOUNCE] Apache Curator 2.12.0 and 3.3.0 released

2017-03-06 Thread Cameron McKenzie
Hello,

The Apache Curator team is pleased to announce the release of versions
2.12.0 and 3.3.0. The Apache Curator Java libraries make using Apache
ZooKeeper much easier and more reliable.

Link to release notes:
2.12.0
https://issues.apache.org/jira/secure/ReleaseNote.jspa?proje
ctId=12314425=12338714

3.3.0
https://issues.apache.org/jira/secure/ReleaseNote.jspa?proje
ctId=12314425=12338713

The most recent source release can be obtained from an Apache Mirror:
http://www.apache.org/dyn/closer.cgi/curator/
(mirror sync times may vary)

The binary artifacts for Curator are available from Maven Central and
its mirrors.

For general information on Apache Curator, please visit the project website:
http://curator.apache.org

Regards,

The Curator Team


Failed: ZOOKEEPER- PreCommit Build #378

2017-03-06 Thread Apache Jenkins Server
Build: https://builds.apache.org/job/PreCommit-ZOOKEEPER-github-pr-build/378/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 1.30 KB...]
Done: 23
  Compressing objects
Done: 0
  Writing objects
Done: 25
  remote: Resolving deltas
  remote: Updating references
Merging refs/tags/changes/378
 > git rev-parse refs/tags/changes/378^{commit} # timeout=10
 > git merge 2ce4ebdb05172097b01ab8f03ed5a76b0494e7d5 # timeout=10
 > git rev-parse branch-3.4^{commit} # timeout=10
Checking out Revision 2ce4ebdb05172097b01ab8f03ed5a76b0494e7d5 (branch-3.4)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 2ce4ebdb05172097b01ab8f03ed5a76b0494e7d5
 > git rev-parse origin/branch-3.4^{commit} # timeout=10
 > git rev-list b26eaf3492a43821f648d8a8f87d8ac3488f1cef # timeout=10
No emails were triggered.
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
[PreCommit-ZOOKEEPER-github-pr-build] $ /bin/bash 
/tmp/hudson2425154560029645396.sh
/home/jenkins/tools/java/latest1.7/bin/java
java version "1.7.0_80"
Java(TM) SE Runtime Environment (build 1.7.0_80-b15)
Java HotSpot(TM) 64-Bit Server VM (build 24.80-b11, mixed mode)
core file size  (blocks, -c) 0
data seg size   (kbytes, -d) unlimited
scheduling priority (-e) 0
file size   (blocks, -f) unlimited
pending signals (-i) 386178
max locked memory   (kbytes, -l) 64
max memory size (kbytes, -m) unlimited
open files  (-n) 6
pipe size(512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority  (-r) 0
stack size  (kbytes, -s) 8192
cpu time   (seconds, -t) unlimited
max user processes  (-u) 10240
virtual memory  (kbytes, -v) unlimited
file locks  (-x) unlimited
Buildfile: 
/home/jenkins/jenkins-slave/workspace/PreCommit-ZOOKEEPER-github-pr-build/build.xml

BUILD FAILED
Target "qa-test-pullrequest" does not exist in the project "ZooKeeper". 

Total time: 0 seconds
Build step 'Execute shell' marked build as failure
Archiving artifacts
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Recording test results
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
ERROR: Step ?Publish JUnit test result report? failed: No test report files 
were found. Configuration error?
[description-setter] Could not determine description.
Putting comment on the pull request
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7
Setting JDK_1_7_LATEST__HOME=/home/jenkins/tools/java/latest1.7



###
## FAILED TESTS (if any) 
##
No tests ran.

[jira] [Commented] (ZOOKEEPER-2693) DOS attack on wchp/wchc four letter words (4lw)

2017-03-06 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2693?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15898109#comment-15898109
 ] 

ASF GitHub Bot commented on ZOOKEEPER-2693:
---

GitHub user hanm opened a pull request:

https://github.com/apache/zookeeper/pull/183

ZOOKEEPER-2693: DOS attack on wchp/wchc four letter words (4lw).

Similar as pull request 179, this PR introduces new property 
zookeeper.4lw.commands.whitelist to branch-3.4.
Unlike branch-3.5 where all 4lw (with few exceptions) is disabled by 
default, for branch-3.4 only "wchp" and "wchc" are disabled by default - since 
4lw is widely used and there is no alternatives in branch-3.4 so we just 
disable the exploitable ones.

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/hanm/zookeeper ZOOKEEPER-2693-br-3.4

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/zookeeper/pull/183.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #183






> DOS attack on wchp/wchc four letter words (4lw)
> ---
>
> Key: ZOOKEEPER-2693
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2693
> Project: ZooKeeper
>  Issue Type: Bug
>  Components: security, server
>Affects Versions: 3.4.0, 3.5.1, 3.5.2
>Reporter: Patrick Hunt
>Assignee: Michael Han
>Priority: Blocker
> Fix For: 3.4.10, 3.5.3
>
> Attachments: ZOOKEEPER-2693-01.patch
>
>
> The wchp/wchc four letter words can be exploited in a DOS attack on the ZK 
> client port - typically 2181. The following POC attack was recently published 
> on the web:
> https://webcache.googleusercontent.com/search?q=cache:_CNGIz10PRYJ:https://www.exploit-db.com/exploits/41277/+=14=en=clnk=us
> The most straightforward way to block this attack is to not allow access to 
> the client port to non-trusted clients - i.e. firewall the ZooKeeper service 
> and only allow access to trusted applications using it for coordination.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[GitHub] zookeeper pull request #183: ZOOKEEPER-2693: DOS attack on wchp/wchc four le...

2017-03-06 Thread hanm
GitHub user hanm opened a pull request:

https://github.com/apache/zookeeper/pull/183

ZOOKEEPER-2693: DOS attack on wchp/wchc four letter words (4lw).

Similar as pull request 179, this PR introduces new property 
zookeeper.4lw.commands.whitelist to branch-3.4.
Unlike branch-3.5 where all 4lw (with few exceptions) is disabled by 
default, for branch-3.4 only "wchp" and "wchc" are disabled by default - since 
4lw is widely used and there is no alternatives in branch-3.4 so we just 
disable the exploitable ones.

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/hanm/zookeeper ZOOKEEPER-2693-br-3.4

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/zookeeper/pull/183.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #183






---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


ZooKeeper_branch34_openjdk7 - Build # 1414 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper_branch34_openjdk7/1414/

###
## LAST 60 LINES OF THE CONSOLE 
###
Started by timer
[EnvInject] - Loading node environment variables.
Building remotely on ubuntu-4 (ubuntu) in workspace 
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34_openjdk7
Cloning the remote Git repository
Cloning repository git://git.apache.org/zookeeper.git
 > git init /home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34_openjdk7 # 
 > timeout=10
Fetching upstream changes from git://git.apache.org/zookeeper.git
 > git --version # timeout=10
 > git fetch --tags --progress git://git.apache.org/zookeeper.git 
 > +refs/heads/*:refs/remotes/origin/*
 > git config remote.origin.url git://git.apache.org/zookeeper.git # timeout=10
 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # 
 > timeout=10
 > git config remote.origin.url git://git.apache.org/zookeeper.git # timeout=10
Cleaning workspace
 > git rev-parse --verify HEAD # timeout=10
No valid HEAD. Skipping the resetting
 > git clean -fdx # timeout=10
Fetching upstream changes from git://git.apache.org/zookeeper.git
 > git fetch --tags --progress git://git.apache.org/zookeeper.git 
 > +refs/heads/*:refs/remotes/origin/*
 > git rev-parse refs/remotes/origin/branch-3.4^{commit} # timeout=10
 > git rev-parse refs/remotes/origin/origin/branch-3.4^{commit} # timeout=10
Checking out Revision b26eaf3492a43821f648d8a8f87d8ac3488f1cef 
(refs/remotes/origin/branch-3.4)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f b26eaf3492a43821f648d8a8f87d8ac3488f1cef
 > git rev-list b26eaf3492a43821f648d8a8f87d8ac3488f1cef # timeout=10
No emails were triggered.
[ZooKeeper_branch34_openjdk7] $ /home/jenkins/tools/ant/latest/bin/ant 
-Dtest.output=yes -Dtest.junit.threads=8 -Dtest.junit.output.format=xml 
-Djavac.target=1.7 clean test-core-java
Exception in thread "main" java.lang.UnsupportedClassVersionError: 
org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:803)
at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:442)
at java.net.URLClassLoader.access$100(URLClassLoader.java:64)
at java.net.URLClassLoader$1.run(URLClassLoader.java:354)
at java.net.URLClassLoader$1.run(URLClassLoader.java:348)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:347)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
Build step 'Invoke Ant' marked build as failure
Recording test results
ERROR: Step ?Publish JUnit test result report? failed: No test report files 
were found. Configuration error?
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any



###
## FAILED TESTS (if any) 
##
No tests ran.

ZooKeeper-trunk-jdk8 - Build # 965 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper-trunk-jdk8/965/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 69.24 MB...]
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:152)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.processSelectedKeys(NioClientBoss.java:105)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.process(NioClientBoss.java:79)
[junit] at 
org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.run(NioClientBoss.java:42)
[junit] at 
org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
[junit] at 
org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
[junit] at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
[junit] at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
[junit] at java.lang.Thread.run(Thread.java:745)
[junit] 2017-03-06 12:02:13,314 [myid:] - INFO  [New I/O boss 
#98:ClientCnxnSocketNetty@208] - channel is told closing
[junit] 2017-03-06 12:02:13,314 [myid:127.0.0.1:16608] - INFO  
[main-SendThread(127.0.0.1:16608):ClientCnxn$SendThread@1231] - channel for 
sessionid 0x102cea476ba is lost, closing socket connection and attempting 
reconnect
[junit] 2017-03-06 12:02:13,348 [myid:127.0.0.1:16707] - INFO  
[main-SendThread(127.0.0.1:16707):ClientCnxn$SendThread@1113] - Opening socket 
connection to server 127.0.0.1/127.0.0.1:16707. Will not attempt to 
authenticate using SASL (unknown error)
[junit] 2017-03-06 12:02:13,348 [myid:] - INFO  [New I/O boss 
#13720:ClientCnxnSocketNetty$1@127] - future isn't success, cause: {}
[junit] java.net.ConnectException: Connection refused: 
127.0.0.1/127.0.0.1:16707
[junit] at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method)
[junit] at 
sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:717)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:152)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.processSelectedKeys(NioClientBoss.java:105)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.process(NioClientBoss.java:79)
[junit] at 
org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.run(NioClientBoss.java:42)
[junit] at 
org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
[junit] at 
org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
[junit] at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
[junit] at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
[junit] at java.lang.Thread.run(Thread.java:745)
[junit] 2017-03-06 12:02:13,349 [myid:] - WARN  [New I/O boss 
#13720:ClientCnxnSocketNetty$ZKClientHandler@439] - Exception caught: [id: 
0x6ed3df48] EXCEPTION: java.net.ConnectException: Connection refused: 
127.0.0.1/127.0.0.1:16707
[junit] java.net.ConnectException: Connection refused: 
127.0.0.1/127.0.0.1:16707
[junit] at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method)
[junit] at 
sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:717)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:152)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.processSelectedKeys(NioClientBoss.java:105)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.process(NioClientBoss.java:79)
[junit] at 
org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)
[junit] at 
org.jboss.netty.channel.socket.nio.NioClientBoss.run(NioClientBoss.java:42)
[junit] at 
org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
[junit] at 
org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)
[junit] at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
[junit] at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
[junit] at java.lang.Thread.run(Thread.java:745)
[junit] 2017-03-06 12:02:13,349 [myid:] - INFO  [New I/O boss 
#13720:ClientCnxnSocketNetty@208] - channel is told closing
[junit] 2017-03-06 12:02:13,349 [myid:127.0.0.1:16707] - INFO  
[main-SendThread(127.0.0.1:16707):ClientCnxn$SendThread@1231] - channel for 
sessionid 

ZooKeeper_branch35_openjdk7 - Build # 440 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper_branch35_openjdk7/440/

###
## LAST 60 LINES OF THE CONSOLE 
###
[...truncated 65.91 MB...]
[junit] at 
org.apache.zookeeper.ClientCnxnSocketNIO.doTransport(ClientCnxnSocketNIO.java:357)
[junit] at 
org.apache.zookeeper.ClientCnxn$SendThread.run(ClientCnxn.java:1214)
[junit] 2017-03-06 10:13:46,486 [myid:127.0.0.1:11222] - INFO  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1113] - Opening socket 
connection to server 127.0.0.1/127.0.0.1:11222. Will not attempt to 
authenticate using SASL (unknown error)
[junit] 2017-03-06 10:13:46,486 [myid:127.0.0.1:11222] - WARN  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1235] - Session 
0x11379d780001 for server 127.0.0.1/127.0.0.1:11222, unexpected error, closing 
socket connection and attempting reconnect
[junit] java.net.ConnectException: Connection refused
[junit] at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method)
[junit] at 
sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:739)
[junit] at 
org.apache.zookeeper.ClientCnxnSocketNIO.doTransport(ClientCnxnSocketNIO.java:357)
[junit] at 
org.apache.zookeeper.ClientCnxn$SendThread.run(ClientCnxn.java:1214)
[junit] 2017-03-06 10:13:47,123 [myid:127.0.0.1:11222] - INFO  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1113] - Opening socket 
connection to server 127.0.0.1/127.0.0.1:11222. Will not attempt to 
authenticate using SASL (unknown error)
[junit] 2017-03-06 10:13:47,123 [myid:127.0.0.1:11222] - WARN  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1235] - Session 
0x11379d78 for server 127.0.0.1/127.0.0.1:11222, unexpected error, closing 
socket connection and attempting reconnect
[junit] java.net.ConnectException: Connection refused
[junit] at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method)
[junit] at 
sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:739)
[junit] at 
org.apache.zookeeper.ClientCnxnSocketNIO.doTransport(ClientCnxnSocketNIO.java:357)
[junit] at 
org.apache.zookeeper.ClientCnxn$SendThread.run(ClientCnxn.java:1214)
[junit] 2017-03-06 10:13:47,598 [myid:127.0.0.1:11222] - INFO  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1113] - Opening socket 
connection to server 127.0.0.1/127.0.0.1:11222. Will not attempt to 
authenticate using SASL (unknown error)
[junit] 2017-03-06 10:13:47,599 [myid:127.0.0.1:11222] - WARN  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1235] - Session 
0x11379d780001 for server 127.0.0.1/127.0.0.1:11222, unexpected error, closing 
socket connection and attempting reconnect
[junit] java.net.ConnectException: Connection refused
[junit] at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method)
[junit] at 
sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:739)
[junit] at 
org.apache.zookeeper.ClientCnxnSocketNIO.doTransport(ClientCnxnSocketNIO.java:357)
[junit] at 
org.apache.zookeeper.ClientCnxn$SendThread.run(ClientCnxn.java:1214)
[junit] 2017-03-06 10:13:48,420 [myid:127.0.0.1:11222] - INFO  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1113] - Opening socket 
connection to server 127.0.0.1/127.0.0.1:11222. Will not attempt to 
authenticate using SASL (unknown error)
[junit] 2017-03-06 10:13:48,421 [myid:127.0.0.1:11222] - WARN  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1235] - Session 
0x11379d78 for server 127.0.0.1/127.0.0.1:11222, unexpected error, closing 
socket connection and attempting reconnect
[junit] java.net.ConnectException: Connection refused
[junit] at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method)
[junit] at 
sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:739)
[junit] at 
org.apache.zookeeper.ClientCnxnSocketNIO.doTransport(ClientCnxnSocketNIO.java:357)
[junit] at 
org.apache.zookeeper.ClientCnxn$SendThread.run(ClientCnxn.java:1214)
[junit] 2017-03-06 10:13:48,792 [myid:127.0.0.1:11222] - INFO  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1113] - Opening socket 
connection to server 127.0.0.1/127.0.0.1:11222. Will not attempt to 
authenticate using SASL (unknown error)
[junit] 2017-03-06 10:13:48,794 [myid:127.0.0.1:11222] - WARN  
[main-SendThread(127.0.0.1:11222):ClientCnxn$SendThread@1235] - Session 
0x11379d780001 for server 127.0.0.1/127.0.0.1:11222, unexpected error, closing 
socket connection and attempting reconnect
[junit] java.net.ConnectException: Connection refused
[junit] at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method)
[junit] at 
sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:739)
[junit] at 

ZooKeeper_branch35_jdk7 - Build # 873 - Still Failing

2017-03-06 Thread Apache Jenkins Server
See https://builds.apache.org/job/ZooKeeper_branch35_jdk7/873/

###
## LAST 60 LINES OF THE CONSOLE 
###
Started by timer
[EnvInject] - Loading node environment variables.
Building remotely on ubuntu-6 (ubuntu) in workspace 
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch35_jdk7
 > git rev-parse --is-inside-work-tree # timeout=10
Fetching changes from the remote Git repository
 > git config remote.origin.url git://git.apache.org/zookeeper.git # timeout=10
Cleaning workspace
 > git rev-parse --verify HEAD # timeout=10
Resetting working tree
 > git reset --hard # timeout=10
 > git clean -fdx # timeout=10
Fetching upstream changes from git://git.apache.org/zookeeper.git
 > git --version # timeout=10
 > git fetch --tags --progress git://git.apache.org/zookeeper.git 
 > +refs/heads/*:refs/remotes/origin/*
 > git rev-parse refs/remotes/origin/branch-3.5^{commit} # timeout=10
 > git rev-parse refs/remotes/origin/origin/branch-3.5^{commit} # timeout=10
Checking out Revision 6d9fc04c052adbc791c63f3f00c816fb8e56 
(refs/remotes/origin/branch-3.5)
 > git config core.sparsecheckout # timeout=10
 > git checkout -f 6d9fc04c052adbc791c63f3f00c816fb8e56
 > git rev-list 6d9fc04c052adbc791c63f3f00c816fb8e56 # timeout=10
No emails were triggered.
[ZooKeeper_branch35_jdk7] $ /home/jenkins/tools/ant/latest/bin/ant 
-Dtest.output=yes -Dtest.junit.threads=8 -Dtest.junit.output.format=xml 
-Djavac.target=1.7 clean test-core-java
Exception in thread "main" java.lang.UnsupportedClassVersionError: 
org/apache/tools/ant/launch/Launcher : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:800)
at 
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:449)
at java.net.URLClassLoader.access$100(URLClassLoader.java:71)
at java.net.URLClassLoader$1.run(URLClassLoader.java:361)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:425)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:358)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:482)
Build step 'Invoke Ant' marked build as failure
Recording test results
ERROR: Step ?Publish JUnit test result report? failed: No test report files 
were found. Configuration error?
Email was triggered for: Failure - Any
Sending email for trigger: Failure - Any



###
## FAILED TESTS (if any) 
##
No tests ran.