You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kafka.apache.org by "Manikumar (JIRA)" <ji...@apache.org> on 2017/09/07 20:31:00 UTC

[jira] [Resolved] (KAFKA-4119) Get topic offset with Kafka SSL&ACL

     [ https://issues.apache.org/jira/browse/KAFKA-4119?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Manikumar resolved KAFKA-4119.
------------------------------
    Resolution: Cannot Reproduce

 Please reopen if the issue still exists. 


> Get topic offset with Kafka SSL&ACL
> -----------------------------------
>
>                 Key: KAFKA-4119
>                 URL: https://issues.apache.org/jira/browse/KAFKA-4119
>             Project: Kafka
>          Issue Type: Bug
>          Components: core
>    Affects Versions: 0.10.0.1
>         Environment: Linux
>            Reporter: zhang shuai
>              Labels: kafka-acl, offset, ssl&acl
>   Original Estimate: 168h
>  Remaining Estimate: 168h
>
> I have a kafka cluster with SSL&ACL when i trun off ACL,i can get offset form kafka-consumer-offset-checker.sh
> [root@node128 kafka_2.11-0.10.0.1]# bin/kafka-consumer-offset-checker.sh --zookeeper localhost:2181/kafka-test --group consumer-group-1 --topic testtopic
> [2016-09-03 14:03:51,722] WARN WARNING: ConsumerOffsetChecker is deprecated and will be dropped in releases following 0.9.0. Use ConsumerGroupCommand instead. (kafka.tools.ConsumerOffsetChecker$)
> Group           Topic                          Pid Offset          logSize         Lag             Owner
> consumer-group-1 testtopic                      0   99981           99981           0               none
> Configuration like this:
> ssl.keystore.location=/opt/ssl_key/server.keystore.jks
> ssl.keystore.password=xdata123
> ssl.key.password=xdata123
> ssl.truststore.location=/opt/ssl_key/server.truststore.jks
> ssl.truststore.password=xdata123
> ssl.client.auth=required
> ssl.enabled.protocols=TLSv1.2,TLSv1.1,TLSv1
> ssl.keystore.type=JKS
> ssl.truststore.type=JKS
> security.inter.broker.protocol=SSL
> But when i want to use ACL and add configuration
> authorizer.class.name=kafka.security.auth.SimpleAclAuthorizer
> super.users=User:CN=node128,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown;User:CN=node129,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown
> Then I use kafka-acls.sh to add principal for topic testtopic and group consumer-group-1,
> I cannot get result of kafka offset from kafka-consumer-offset-checker.sh. Is there something deferent in ACL? How can I get topics` offset in kafka ACL model?



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)