You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@kafka.apache.org by BigData dev <bi...@gmail.com> on 2016/04/13 02:06:06 UTC
Reg: Issue with Kerberos &Kafka(0.9.0.1)
Hi All,
I am facing issue with kafka kerberoized cluster.
After following the steps how to enables SASL on kafka by using below link.
http://docs.confluent.io/2.0.0/kafka/sasl.html
After this,when i start the kafka-server I am getting below error.
[2016-04-12 16:59:26,201] ERROR [KafkaApi-1001] error when handling request
Name:LeaderAndIsrRequest;Version:0;Controller:1001;ControllerEpoch:3;CorrelationId:3;ClientId:1001;Leaders:BrokerEndPoint(1001,
hostname.com,6667);PartitionState:(t1,0) ->
(LeaderAndIsrInfo:(Leader:1001,ISR:1001,LeaderEpoch:1,ControllerEpoch:3),ReplicationFactor:1),AllReplicas:1001),(ambari_kafka_service_check,0)
->
(LeaderAndIsrInfo:(Leader:1001,ISR:1001,LeaderEpoch:2,ControllerEpoch:3),ReplicationFactor:1),AllReplicas:1001)
(kafka.server.KafkaApis)
kafka.common.ClusterAuthorizationException: Request
Request(0,9.30.150.20:6667-9.30.150.20:37550,Session(User:kafka,/9.30.150.20),null,1460505566200,SASL_PLAINTEXT)
is not authorized.
at kafka.server.KafkaApis.authorizeClusterAction(KafkaApis.scala:910)
at kafka.server.KafkaApis.handleLeaderAndIsrRequest(KafkaApis.scala:113)
at kafka.server.KafkaApis.handle(KafkaApis.scala:72)
at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:60)
at java.lang.Thread.run(Thread.java:745)
Regards,
Bharat
Re: Reg: Issue with Kerberos &Kafka(0.9.0.1)
Posted by BigData dev <bi...@gmail.com>.
Hi Ismael,
Thank you for providing link.
I was able to resolve the issue.
Regards,
Bharat
On Wed, Apr 13, 2016 at 1:41 AM, Ismael Juma <is...@juma.me.uk> wrote:
> Hi Bharat,
>
> It looks authorization is not configured correctly. I suggest taking a look
> at the following blog post that configures authentication and authorization
> and includes a vagrant setup that you can test:
>
>
> http://www.confluent.io/blog/apache-kafka-security-authorization-authentication-encryption
>
> Ismael
>
> On Wed, Apr 13, 2016 at 1:06 AM, BigData dev <bi...@gmail.com>
> wrote:
>
> > Hi All,
> > I am facing issue with kafka kerberoized cluster.
> >
> > After following the steps how to enables SASL on kafka by using below
> link.
> > http://docs.confluent.io/2.0.0/kafka/sasl.html
> >
> >
> >
> > After this,when i start the kafka-server I am getting below error.
> > [2016-04-12 16:59:26,201] ERROR [KafkaApi-1001] error when handling
> request
> >
> >
> Name:LeaderAndIsrRequest;Version:0;Controller:1001;ControllerEpoch:3;CorrelationId:3;ClientId:1001;Leaders:BrokerEndPoint(1001,
> > hostname.com,6667);PartitionState:(t1,0) ->
> >
> >
> (LeaderAndIsrInfo:(Leader:1001,ISR:1001,LeaderEpoch:1,ControllerEpoch:3),ReplicationFactor:1),AllReplicas:1001),(ambari_kafka_service_check,0)
> > ->
> >
> >
> (LeaderAndIsrInfo:(Leader:1001,ISR:1001,LeaderEpoch:2,ControllerEpoch:3),ReplicationFactor:1),AllReplicas:1001)
> > (kafka.server.KafkaApis)
> > kafka.common.ClusterAuthorizationException: Request
> > Request(0,9.30.150.20:6667-9.30.150.20:37550,Session(User:kafka,/
> > 9.30.150.20),null,1460505566200,SASL_PLAINTEXT)
> > is not authorized.
> > at kafka.server.KafkaApis.authorizeClusterAction(KafkaApis.scala:910)
> > at
> > kafka.server.KafkaApis.handleLeaderAndIsrRequest(KafkaApis.scala:113)
> > at kafka.server.KafkaApis.handle(KafkaApis.scala:72)
> > at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:60)
> > at java.lang.Thread.run(Thread.java:745)
> >
> >
> > Regards,
> > Bharat
> >
>
Re: Reg: Issue with Kerberos &Kafka(0.9.0.1)
Posted by Ismael Juma <is...@juma.me.uk>.
Hi Bharat,
It looks authorization is not configured correctly. I suggest taking a look
at the following blog post that configures authentication and authorization
and includes a vagrant setup that you can test:
http://www.confluent.io/blog/apache-kafka-security-authorization-authentication-encryption
Ismael
On Wed, Apr 13, 2016 at 1:06 AM, BigData dev <bi...@gmail.com>
wrote:
> Hi All,
> I am facing issue with kafka kerberoized cluster.
>
> After following the steps how to enables SASL on kafka by using below link.
> http://docs.confluent.io/2.0.0/kafka/sasl.html
>
>
>
> After this,when i start the kafka-server I am getting below error.
> [2016-04-12 16:59:26,201] ERROR [KafkaApi-1001] error when handling request
>
> Name:LeaderAndIsrRequest;Version:0;Controller:1001;ControllerEpoch:3;CorrelationId:3;ClientId:1001;Leaders:BrokerEndPoint(1001,
> hostname.com,6667);PartitionState:(t1,0) ->
>
> (LeaderAndIsrInfo:(Leader:1001,ISR:1001,LeaderEpoch:1,ControllerEpoch:3),ReplicationFactor:1),AllReplicas:1001),(ambari_kafka_service_check,0)
> ->
>
> (LeaderAndIsrInfo:(Leader:1001,ISR:1001,LeaderEpoch:2,ControllerEpoch:3),ReplicationFactor:1),AllReplicas:1001)
> (kafka.server.KafkaApis)
> kafka.common.ClusterAuthorizationException: Request
> Request(0,9.30.150.20:6667-9.30.150.20:37550,Session(User:kafka,/
> 9.30.150.20),null,1460505566200,SASL_PLAINTEXT)
> is not authorized.
> at kafka.server.KafkaApis.authorizeClusterAction(KafkaApis.scala:910)
> at
> kafka.server.KafkaApis.handleLeaderAndIsrRequest(KafkaApis.scala:113)
> at kafka.server.KafkaApis.handle(KafkaApis.scala:72)
> at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:60)
> at java.lang.Thread.run(Thread.java:745)
>
>
> Regards,
> Bharat
>