You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kafka.apache.org by "Ait haj Slimane (JIRA)" <ji...@apache.org> on 2017/04/03 09:10:41 UTC

[jira] [Updated] (KAFKA-4984) Unable to produce or consume when enabling authentication SASL/Kerberos

     [ https://issues.apache.org/jira/browse/KAFKA-4984?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ait haj Slimane updated KAFKA-4984:
-----------------------------------
    Attachment: logKafka.txt
                logZookeeper.txt

> Unable to produce or consume when enabling authentication SASL/Kerberos
> -----------------------------------------------------------------------
>
>                 Key: KAFKA-4984
>                 URL: https://issues.apache.org/jira/browse/KAFKA-4984
>             Project: Kafka
>          Issue Type: Bug
>         Environment: Ubuntu 16.04LTS running in VirtualBox
>            Reporter: Ait haj Slimane
>            Priority: Critical
>         Attachments: logKafka.txt, logZookeeper.txt, Screenshot from 2017-03-30 15-36-30.png
>
>
> I have a problem while trying to produce or consume on kerberos enabled cluster.
> I launched a single broker and a console producer,
> using the SASL authentication between producer and broker.
> When i run the producer ,I got the result attached below
> Any advice on what can cause the problem.
> Thanks!
> ================================
> configuration used:
> server.properties:
> listeners=SASL_PLAINTEXT://kafka.example.com:9092
> security.inter.broker.protocol=SASL_PLAINTEXT
> sasl.mechanism.inter.broker.protocol=GSSAPI
> sasl.enabled.mechanism=GSSAPI
> sasl.kerberos.service.name=kafka
> producer.properties
> bootstrap.servers=kafka.example.com:9092
> sasl.kerberos.service.name=kafka
> security.protocol=SASL_PLAINTEXT
> kafka_client_jaas.conf
> KafkaClient {
>     com.sun.security.auth.module.Krb5LoginModule required
>     useKeyTab=true
>     storeKey=true
>     keyTab="/etc/kafka/keytabs/kafkaclient.keytab"
>     principal="kafkaclient/kafka.example.com@EXAMPLE.COM";
> };



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)