{"record":{"id":"b19214905aa49cda","repo":"t8y2/dbx","slug":"start-zookeeper-gssapi-negotiation-w-b19214","errorCode":null,"errorMessage":"start ZooKeeper GSSAPI negotiation: %w","messagePattern":"start ZooKeeper GSSAPI negotiation: %w","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"agents/drivers/hive-go/zookeeper_protocol.go","lineNumber":200,"sourceCode":"func zooKeeperTimeoutMillis(timeout time.Duration) int32 {\n\tmilliseconds := timeout.Milliseconds()\n\tif milliseconds < 1 {\n\t\treturn 1\n\t}\n\tif milliseconds > math.MaxInt32 {\n\t\treturn math.MaxInt32\n\t}\n\treturn int32(milliseconds)\n}\n\nfunc (client *protocolZooKeeperClient) authenticateSASL(saslClient zooKeeperSASLClient) error {\n\tif saslClient == nil {\n\t\treturn errors.New(\"ZooKeeper SASL client is nil\")\n\t}\n\tdefer saslClient.Dispose()\n\ttoken, err := saslClient.Start()\n\tif err != nil {\n\t\treturn fmt.Errorf(\"start ZooKeeper GSSAPI negotiation: %w\", err)\n\t}\n\tfor round := 0; round < zooKeeperMaxSASLRounds; round++ {\n\t\tresponse, requestErr := client.request(zooKeeperOpSASL, func(encoder *zooKeeperEncoder) {\n\t\t\tif token == nil {\n\t\t\t\tencoder.bytes([]byte{})\n\t\t\t\treturn\n\t\t\t}\n\t\t\tencoder.bytes(token)\n\t\t})\n\t\tif requestErr != nil {\n\t\t\treturn fmt.Errorf(\"ZooKeeper SASL round %d: %w\", round+1, requestErr)\n\t\t}\n\t\tdecoder := newZooKeeperDecoder(response)\n\t\tchallenge, decodeErr := decoder.bytes()\n\t\tif decodeErr != nil {\n\t\t\treturn fmt.Errorf(\"decode ZooKeeper SASL round %d: %w\", round+1, decodeErr)\n\t\t}\n\t\tif saslClient.Complete() {","sourceCodeStart":182,"sourceCodeEnd":218,"githubUrl":"https://github.com/t8y2/dbx/blob/c0390bff16418b651f4728520d99adf8ce48829a/agents/drivers/hive-go/zookeeper_protocol.go#L182-L218","documentation":"Returned by protocolZooKeeperClient.authenticateSASL when the GSSAPI SASL client's initial Start() call fails, so no initial token could be produced for ZooKeeper SASL negotiation. Root causes are Kerberos-level: no TGT, missing keytab, bad principal or JAAS/krb5 configuration.","triggerScenarios":"Thrown at agents/drivers/hive-go/zookeeper_protocol.go:200 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Verify the Kerberos environment: TGT present (klist) or keytab readable and correctly referenced","Check JAAS config CassandraJavaClient/Client block and krb5.conf realm settings","Confirm the service principal for ZooKeeper exists in the KDC","Read the wrapped error — it identifies whether credential acquisition or context creation failed"],"exampleFix":null,"handlingStrategy":"try-catch","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"c0390bff16418b651f4728520d99adf8ce48829a","analyzedAt":"2026-09-05T23:05:10.900Z","contentChangedAt":"2026-09-05T23:05:10.900Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}