Enabling authentication in cluster will not synchronize this change to other members

[densetsunozero]

Hi,
I built a 3-member cluster ( infra1, infra2, infra3 ) on three machines (dev01, dev02, dev03) with the latest stable version 2.2.0. Now I found that if I enable authentication on one member after creating root user, sometimes this change will be synchronize to other members, but sometimes it won't. And it seemed that using command line tool etcdctl auth enable has greater chance to trigger this bug than using curl.

Here's my steps:

1. Start the cluster according to https://github.com/coreos/etcd/blob/master/Documentation/clustering.md
2. Create root user on infra1 by curl or etcdctl, this change will be reflected on all the other members.
3. Use etcdctl auth enable on infra1, or curl, to enable authentication.
4. Use curl http://dev02:2379/v2/auth/enable and curl http://dev03:2379/v2/auth/enable to check the authentication status on infra2 and infra3. Sometime one or both will return {"enabled": false }

Thanks.

[yichengq]

I could reproduce this.

It is caused by the cache of enabled var in auth pkg.

[densetsunozero]

Thanks for the reply. I hope this issue get fixed soon.

[MSamman]

I can pick this up?

[raoofm]

@yichengq I use the same version, why don't I face this issue?

[yichengq]

@MSamman sure.

@raoofm I think if it restarts, it will work correctly then.

[xiang90]

@mitake Are you still working on this one?