title: Can not start Secure ZooKeeper
body: <p>I installed Kerberos for CDH 5.3.2 following this <a href="http://www.cloudera.com/content/cloudera/en/documentation/core/v5-3-x/topics/cm_sg_authentication.html" rel="nofollow">official document</a>. </p>
  
  <p>Also I followed <a href="http://www.cloudera.com/content/cloudera/en/documentation/core/v5-3-x/topics/cdh_sg_zookeeper_security.html#topic_11_unique_2" rel="nofollow">ZooKeeper Authentication</a> to configure a secure ZooKeeper, where I did the following :<br/>
  1). created principals for each ZK server and exported their keytab files; <br/>2). configured related files, like <code>zoo.cfg</code>,<code>jaas.conf</code> and <code>java.env</code>; </p>
  
  <p>But when I tried to start ZK Cluster it failed. I checked the log files and it reported the following exceptions:</p>
  
  <blockquote>
    <p>2015-09-22 15:19:08,232 ERROR org.apache.zookeeper.server.quorum.QuorumPeerMain: Unexpected exception, exiting abnormally
    java.io.IOException: Could not configure server because SASL configuration did not allow the  ZooKeeper server to authenticate itself properly: javax.security.auth.login.LoginException: 
    Checksum failed
        at org.apache.zookeeper.server.ServerCnxnFactory.configureSaslLogin(ServerCnxnFactory.java:207)
        at org.apache.zookeeper.server.NIOServerCnxnFactory.configure(NIOServerCnxnFactory.java:87)
        at org.apache.zookeeper.server.quorum.QuorumPeerMain.runFromConfig(QuorumPeerMain.java:135)
        at org.apache.zookeeper.server.quorum.QuorumPeerMain.initializeAndRun(QuorumPeerMain.java:116)
        at org.apache.zookeeper.server.quorum.QuorumPeerMain.main(QuorumPeerMain.java:79)</p>
  </blockquote>
  
  <p><br/>
  <strong>Check sum failed</strong>. I've no idea what that means.</p>
  
  <p><br/>
  I'm sure my Kerberized CDH is running OK because I can access HDFS and submit YARN job as corresponding principals. Besides, I can get ticket for zookeeper's principals by the command <code>kinit -k -t &lt;path-to-keytab&gt; &lt;zookeeper/FQDN@REALM&gt;</code>. </p>
  
  <p>So what caused the problem? Any suggestion would be appreciated. </p>