You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Andras Katona (Jira)" <ji...@apache.org> on 2022/07/27 13:37:00 UTC
[jira] [Commented] (RANGER-3842) Ranger Kafka test connection timeout in Kerberos environment
[ https://issues.apache.org/jira/browse/RANGER-3842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17571925#comment-17571925 ]
Andras Katona commented on RANGER-3842:
---------------------------------------
It seems to be a configuration issue (and not a bug), I don't know how ranger should be configured, yet just tried out this test connection function providing the params (sasl.mechanism, security.protocol, bootstrap.servers, kafka.keytab and kafka.principal) and worked for me.
On the other hand, you have to configure kafka broker (the kafka plugin in it) to be able to connect to ranger in {{ranger-kafka-security.xml}}.
> Ranger Kafka test connection timeout in Kerberos environment
> ------------------------------------------------------------
>
> Key: RANGER-3842
> URL: https://issues.apache.org/jira/browse/RANGER-3842
> Project: Ranger
> Issue Type: Bug
> Components: plugins, Ranger
> Affects Versions: 2.3.0
> Environment: linux
> Reporter: kejie
> Priority: Major
> Attachments: image-2022-07-26-11-38-37-426.png, image-2022-07-26-11-38-55-377.png, image-2022-07-26-11-42-13-846.png
>
>
> Excuse me, how can I configure my Kafka to work normally?
> The following is my related configuration and log information！
>
> ranger-admin.log
>
> {code:java}
> 2022-07-26 02:52:13,658 [http-nio-6080-exec-9] ERROR [ServiceMgr.java:198] ==> ServiceMgr.validateConfig Error:java.util.concurrent.TimeoutException
> ...
> ...
> ...
> 2022-07-26 00:00:28,532 [http-nio-6080-exec-5] INFO [RESTErrorUtil.java:346] Request failed. loginId=null, logMessage=Unauthenticated access not allowed
> javax.ws.rs.WebApplicationException: null{code}
>
>
>
>
> This is my Kafka server.log
>
> {code:java}
> [2022-07-26 11:27:05,359] WARN Error getting Roles. secureMode=false, user=root (auth:SIMPLE), response={"httpStatusCode":400,"statusCode":0}, serviceName=kmr_kafka (org.apache.ranger.admin.client.RangerAdminRESTClient){code}
>
>
>
> ranger-admin ui
> !image-2022-07-26-11-38-37-426.png!
> !image-2022-07-26-11-42-13-846.png!
> !image-2022-07-26-11-38-55-377.png!
> ranger-admin install.properties kerberos config
> {code:java}
> #------------ Kerberos Config -----------------
> spnego_principal=HTTP/kmr-58106bd2-gn-127160a8-master-1-1.ksc.com@KINGSOFT.COM
> spnego_keytab=/etc/kmr/krb5/data/keytabs/kmr.keytab
> token_valid=30
> cookie_domain=
> cookie_path=/
> admin_principal=hadoop/kmr-58106bd2-gn-127160a8-master-1-1.ksc.com@KINGSOFT.COM
> admin_keytab=/etc/kmr/krb5/data/keytabs/kmr.keytab
> lookup_principal=hadoop/kmr-58106bd2-gn-127160a8-master-1-1.ksc.com@KINGSOFT.COM
> lookup_keytab=/etc/kmr/krb5/data/keytabs/kmr.keytab
> hadoop_conf=/mnt/kmr/hadoop/1/hadoop-3.1.1/etc/hadoop {code}
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)