[jira] [Commented] (KAFKA-3950) kafka mirror maker tool is not respecting whitelist option

["Ismael Juma (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KAFKA-3950?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15372516#comment-15372516 ] 

Ismael Juma commented on KAFKA-3950:
------------------------------------

[~omkreddy], yes, it's a current limitation that if you use pattern subscriptions, you need to have describe permission for all topics. There are many advantages in doing the filtering server-side, but that's a bit tricky because the protocol-level regex would have to work across languages. One option is to use a perl regex library in Java as that is probably the closest one would have to a standard. In any case, it's a significant change which would require a KIP and quite a bit of discussion.

> kafka mirror maker tool is not respecting whitelist option
> ----------------------------------------------------------
>
>                 Key: KAFKA-3950
>                 URL: https://issues.apache.org/jira/browse/KAFKA-3950
>             Project: Kafka
>          Issue Type: Bug
>            Reporter: Raghav Kumar Gautam
>            Assignee: Manikumar Reddy
>            Priority: Critical
>
> A mirror maker launched like this:
> {code}
> /usr/bin/kinit -k -t /home/kfktest/hadoopqa/keytabs/kfktest.headless.keytab kfktest@EXAMPLE.COM
> JAVA_HOME=/usr/jdk64/jdk1.8.0_77 JMX_PORT=9112 /usr/kafka/bin/kafka-run-class.sh kafka.tools.MirrorMaker --consumer.config /usr/kafka/system_test/mirror_maker_testsuite/testcase_15001/config/mirror_consumer_12.properties --producer.config /usr/kafka/system_test/mirror_maker_testsuite/testcase_15001/config/mirror_producer_12.properties --new.consumer --whitelist="test.*" >>  /usr/kafka/system_test/mirror_maker_testsuite/testcase_15001/logs/mirror_maker-12/mirror_maker_12.log 2>&1 & echo pid:$! >  /usr/kafka/system_test/mirror_maker_testsuite/testcase_15001/logs/mirror_maker-12/entity_12_pid
> {code}
> Lead to TopicAuthorizationException:
> {code}
> WARN Error while fetching metadata with correlation id 44 : {__consumer_offsets=TOPIC_AUTHORIZATION_FAILED} (org.apache.kafka.clients.NetworkClient)
> [2016-06-20 13:24:49,983] FATAL [mirrormaker-thread-0] Mirror maker thread failure due to  (kafka.tools.MirrorMaker$MirrorMakerThread)
> org.apache.kafka.common.errors.TopicAuthorizationException: Not authorized to access topics: [__consumer_offsets]
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)