You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kafka.apache.org by "Mohammad Abbasi (JIRA)" <ji...@apache.org> on 2015/11/03 16:10:27 UTC
[jira] [Created] (KAFKA-2731) Kerberos on same host with Kafka does
not find server in it's database on Ubuntu
Mohammad Abbasi created KAFKA-2731:
--------------------------------------
Summary: Kerberos on same host with Kafka does not find server in it's database on Ubuntu
Key: KAFKA-2731
URL: https://issues.apache.org/jira/browse/KAFKA-2731
Project: Kafka
Issue Type: Bug
Affects Versions: 0.9.0.0
Reporter: Mohammad Abbasi
Configuring Kafka to use keytab created in Kerberos, as it's said in https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=61326390,
Kerberos logs:
Nov 02 17:25:13 myhost krb5kdc[3307](info): TGS_REQ (5 etypes {17 16 23 1 3}) 192.168.18.241: LOOKING_UP_SERVER: authtime 0, kafka/myhost@A.ORG for <unknown server>, Server not found in Kerberos database
Kafka's log:
SASL Connection info:
[2015-11-03 18:33:00,544] DEBUG creating sasl client: client=kafka/myhost@A.ORG;service=zookeeper;serviceHostname=myhost (org.apache.zookeeper.client.ZooKeeperSaslClient)
and error:
[2015-11-03 18:33:00,607] ERROR An error: (java.security.PrivilegedActionException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - LOOKING_UP_SERVER)]) occurred when evaluating Zookeeper Quorum Member's received SASL token. Zookeeper Client will go to AUTH_FAILED state. (org.apache.zookeeper.client.ZooKeeperSaslClient)
[2015-11-03 18:33:00,607] ERROR SASL authentication with Zookeeper Quorum member failed: javax.security.sasl.SaslException: An error: (java.security.PrivilegedActionException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - LOOKING_UP_SERVER)]) occurred when evaluating Zookeeper Quorum Member's received SASL token. Zookeeper Client will go to AUTH_FAILED state. (org.apache.zookeeper.ClientCnxn)
Kerberos works ok in kinit and kvno with the keytab.
Some people said it's DNS or /etc/hosts problem, but nslookup was ok with ip and hostname
and /etc/hosts is:
127.0.0.1 myhost localhost
# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
I tested it with the host's ip too.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)