{"record":{"id":"a218a92cde890df4","repo":"apache/hadoop","slug":"could-not-load-zk-acls-or-auth-ex","errorCode":null,"errorMessage":"Could not Load ZK acls or auth: {ex}","messagePattern":"Could not Load ZK acls or auth: (.+?)","errorType":"exception","errorClass":"RuntimeException","httpStatus":null,"severity":"error","filePath":"hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/token/delegation/ZKDelegationTokenSecretManager.java","lineNumber":237,"sourceCode":"      return ZookeeperClient.configure()\n          .withConnectionString(connString)\n          .withNamespace(namespace)\n          .withZookeeperFactory(zkFactory)\n          .withAuthType(authType)\n          .withKeytab(keytab)\n          .withPrincipal(principal)\n          .withJaasLoginEntryName(JAAS_LOGIN_ENTRY_NAME)\n          .withRetryPolicy(retryPolicy)\n          .withSessionTimeout(sessionTimeout)\n          .withConnectionTimeout(connectionTimeout)\n          .enableSSL(isSSLEnabled)\n          .withKeystore(keystoreLocation)\n          .withKeystorePassword(keystorePassword)\n          .withTruststore(truststoreLocation)\n          .withTruststorePassword(truststorePassword)\n          .create();\n    } catch (Exception ex) {\n      throw new RuntimeException(\"Could not Load ZK acls or auth: \" + ex, ex);\n    }\n  }\n\n  @Override\n  public void startThreads() throws IOException {\n    if (!isExternalClient) {\n      try {\n        zkClient.start();\n      } catch (Exception e) {\n        throw new IOException(\"Could not start Curator Framework\", e);\n      }\n    } else {\n      // If namespace parents are implicitly created, they won't have ACLs.\n      // So, let's explicitly create them.\n      CuratorFramework nullNsFw = zkClient.usingNamespace(null);\n      try {\n        String nameSpace = \"/\" + zkClient.getNamespace();\n        nullNsFw.create().creatingParentContainersIfNeeded().forPath(nameSpace);","sourceCodeStart":219,"sourceCodeEnd":255,"githubUrl":"https://github.com/apache/hadoop/blob/2add9630210752f88ceb1bb74eb65e37bf41da8e/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/token/delegation/ZKDelegationTokenSecretManager.java#L219-L255","documentation":"Error \"Could not Load ZK acls or auth: {ex}\" thrown in apache/hadoop.","triggerScenarios":"Thrown at hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/token/delegation/ZKDelegationTokenSecretManager.java:237 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["ZooKeeper ACL/auth configuration could not be parsed. Check hadoop.zk.acl and hadoop.zk.auth values: ACLs must be 'scheme:id:perm' and auths 'scheme:auth'. Underlying error: {ex}."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"2add9630210752f88ceb1bb74eb65e37bf41da8e","analyzedAt":"2026-08-22T19:55:07.957Z","schemaVersion":2},"datasetVersion":"2026-08-22T20:17:22.307Z"}