You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jira@kafka.apache.org by "Manikumar (JIRA)" <ji...@apache.org> on 2018/12/04 06:29:00 UTC
[jira] [Commented] (KAFKA-7696) kafka-delegation-tokens.sh using a
config file that contains security.protocol=SASL_PLAINTEXT throws
OutOfMemoryError if it tries to connect to an SSL-enabled secured broker
[ https://issues.apache.org/jira/browse/KAFKA-7696?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16708257#comment-16708257 ]
Manikumar commented on KAFKA-7696:
----------------------------------
[~asasvari] This is related to KAFKA-4493. There is a WIP PR https://github.com/apache/kafka/pull/5940.
> kafka-delegation-tokens.sh using a config file that contains security.protocol=SASL_PLAINTEXT throws OutOfMemoryError if it tries to connect to an SSL-enabled secured broker
> -----------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: KAFKA-7696
> URL: https://issues.apache.org/jira/browse/KAFKA-7696
> Project: Kafka
> Issue Type: Bug
> Components: tools
> Affects Versions: 1.1.0, 2.0.0
> Reporter: Attila Sasvari
> Assignee: Viktor Somogyi
> Priority: Major
>
> When the command-config file of kafka-delegation-tokens contain security.protocol=SASL_PLAINTEXT instead of SASL_SSL (i.e. due to a user error), the process throws a java.lang.OutOfMemoryError upon connection attempt to a secured (i.e. Kerberized, SSL-enabled) Kafka broker.
> {code}
> [2018-12-03 11:27:13,221] ERROR Uncaught exception in thread 'kafka-admin-client-thread | adminclient-1': (org.apache.kafka.common.utils.KafkaThread)
> java.lang.OutOfMemoryError: Java heap space
> at java.nio.HeapByteBuffer.<init>(HeapByteBuffer.java:57)
> at java.nio.ByteBuffer.allocate(ByteBuffer.java:335)
> at org.apache.kafka.common.memory.MemoryPool$1.tryAllocate(MemoryPool.java:30)
> at org.apache.kafka.common.network.NetworkReceive.readFrom(NetworkReceive.java:112)
> at org.apache.kafka.common.security.authenticator.SaslClientAuthenticator.receiveResponseOrToken(SaslClientAuthenticator.java:407)
> at org.apache.kafka.common.security.authenticator.SaslClientAuthenticator.receiveKafkaResponse(SaslClientAuthenticator.java:497)
> at org.apache.kafka.common.security.authenticator.SaslClientAuthenticator.authenticate(SaslClientAuthenticator.java:207)
> at org.apache.kafka.common.network.KafkaChannel.prepare(KafkaChannel.java:173)
> at org.apache.kafka.common.network.Selector.pollSelectionKeys(Selector.java:533)
> at org.apache.kafka.common.network.Selector.poll(Selector.java:468)
> at org.apache.kafka.clients.NetworkClient.poll(NetworkClient.java:535)
> at org.apache.kafka.clients.admin.KafkaAdminClient$AdminClientRunnable.run(KafkaAdminClient.java:1125)
> at java.lang.Thread.run(Thread.java:745)
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)