You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@sentry.apache.org by "Gergo Wilder (Jira)" <ji...@apache.org> on 2019/11/05 12:21:00 UTC
[jira] [Created] (SENTRY-2535) SentryKafkaAuthorizer throws
Exception when describing ACLs
Gergo Wilder created SENTRY-2535:
------------------------------------
Summary: SentryKafkaAuthorizer throws Exception when describing ACLs
Key: SENTRY-2535
URL: https://issues.apache.org/jira/browse/SENTRY-2535
Project: Sentry
Issue Type: Bug
Components: Sentry
Reporter: Gergo Wilder
ConsumerGroup resource type is not handled properly in SentryKafkaAuthorizer causing an exception when converting from Sentry consumer group resource type to Kafka's consumer group resource type.
{noformat}
2019-10-25 12:30:17,992 ERROR kafka.server.KafkaApis: [KafkaApi-6] Error when handling request: clientId=adminclient-83, correlationId=1158, api=DESCRIBE_ACLS, body={resource_type=2,resource_name=null,resource_pattern_type_filter=1,principal=null,host=null,operation=1,permission_type=1}
kafka.common.KafkaException: CONSUMERGROUP not a valid resourceType name. The valid names are Topic,Group,Cluster,TransactionalId,DelegationToken
at kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
at kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
at scala.Option.getOrElse(Option.scala:121)
at kafka.security.auth.ResourceType$.fromString(ResourceType.scala:64)
at org.apache.sentry.kafka.binding.KafkaAuthBinding.rolePrivilegesToResourceAcls(KafkaAuthBinding.java:481)
at org.apache.sentry.kafka.binding.KafkaAuthBinding.getAclsForRoles(KafkaAuthBinding.java:463)
at org.apache.sentry.kafka.binding.KafkaAuthBinding.getAcls(KafkaAuthBinding.java:379)
at org.apache.sentry.kafka.authorizer.SentryKafkaAuthorizer.getAcls(SentryKafkaAuthorizer.java:93)
at kafka.server.KafkaApis.handleDescribeAcls(KafkaApis.scala:1911)
at kafka.server.KafkaApis.handle(KafkaApis.scala:137)
at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:74)
at java.lang.Thread.run(Thread.java:748)
{noformat}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)