Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id AE212200C62 for ; Wed, 12 Apr 2017 00:27:03 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id AC9E0160B9E; Tue, 11 Apr 2017 22:27:03 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id CCF98160B9B for ; Wed, 12 Apr 2017 00:27:02 +0200 (CEST) Received: (qmail 504 invoked by uid 500); 11 Apr 2017 22:27:01 -0000 Mailing-List: contact user-help@flink.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list user@flink.apache.org Received: (qmail 494 invoked by uid 99); 11 Apr 2017 22:27:01 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 11 Apr 2017 22:27:01 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 1AE13C0D33 for ; Tue, 11 Apr 2017 22:27:01 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 2.88 X-Spam-Level: ** X-Spam-Status: No, score=2.88 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, KAM_NUMSUBJECT=0.5, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=disabled Authentication-Results: spamd4-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id 4-AMMKaDSGcp for ; Tue, 11 Apr 2017 22:26:59 +0000 (UTC) Received: from mail-lf0-f42.google.com (mail-lf0-f42.google.com [209.85.215.42]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 960AF5FBFC for ; Tue, 11 Apr 2017 22:26:58 +0000 (UTC) Received: by mail-lf0-f42.google.com with SMTP id t144so5591007lff.1 for ; Tue, 11 Apr 2017 15:26:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to; bh=A3RLAWwXoVTWj/KUKZuSvMB+6ennc98jZdRUNXDSuQM=; b=uoUjJ6Pjf5Micz3+O+Rfmy6xrbzQhnjjEzoGDMX/Idp3T+2AWE2GhuQOuL3lbnY6gq 61tYmLt3nHPdIVYFaJh+5DTLIY2v2TdFQqg2lly0PlS1p0HFB5cdQNfXsy6+y2EP/aav b+mFcCF9rfVOljwBFw09iWmIWkj5v32jIwNSXY4dI03Q1kS6Q848ly7AZPCf8E64f9DA +RhT6LskmaCzWSUM3pWJddfczdxi+bTq5rQ99+45VBVUM9XgV/2mTtHGJEtnNclWSfyz acWzdLw4gQdaJJ/06ow5YteeR3B70mnOPzmZgpwHxBGrLSNjQxrQf+jIESGAkTz3PXBO KDvQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to; bh=A3RLAWwXoVTWj/KUKZuSvMB+6ennc98jZdRUNXDSuQM=; b=td4+aOrM+KBgUcdAwdtpX65rTLFh7/QJOjnu9a4ROEmKQN3kAFrRDvNri1AAlyU9Ht r2PvU7xqxSCg0BtN+9jjCfA0T4fftc4MKpZB9k/nz3ip+FFOw5zN6vb3Fd42qhEaaWd4 BJe9lGrLAWERQEhYD7Yv62Pz0WY1lBL5sEh3mSAo1MILvHl8iC5BZ23oeOJ8gcF1YBUo eJUTYe2SRjDJp2ebbmIxVE1/ZV/Q44Z4rrt9KixsMjYelAxubgIT1ShHHuzoWCgneDNc oeMkToyXRIDAKUalPg8o592KUmF83xfPgpeMk/a2bx/FhUtXJ89eFe0CGPHe4A4r7OW1 NFBg== X-Gm-Message-State: AFeK/H0uoCsNRGR3Mynk1vXvSHAuUZyIKnlVCMq84LIo7zmap21ab+5Ry7ZyrcaPoxV5JoDqaDm16cBEyn1XIA== X-Received: by 10.46.88.79 with SMTP id x15mr17520238ljd.39.1491949616494; Tue, 11 Apr 2017 15:26:56 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Tue, 11 Apr 2017 15:26:55 -0700 From: "Tzu-Li (Gordon) Tai" In-Reply-To: References: X-Mailer: Airmail (420) MIME-Version: 1.0 Date: Tue, 11 Apr 2017 15:26:55 -0700 Message-ID: Subject: Re: Problems with Kerberos Kafka connection in version 1.2.0 To: user@flink.apache.org Content-Type: multipart/alternative; boundary=f40304387f4ce9fdcb054ceb965f archived-at: Tue, 11 Apr 2017 22:27:03 -0000 --f40304387f4ce9fdcb054ceb965f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Diego, I think the problem is here: security.kerberos.login.contexts: Client, KafkaClient The space between =E2=80=9CClient,=E2=80=9D and =E2=80=9CKafkaClient=E2=80= =9D is causing the problem. Removing it should fix your issue. Cheers, Gordon On April 11, 2017 at 3:24:20 AM, Diego Fustes Villad=C3=B3niga (dfustes@oes= ia.com) wrote: Hi all, I=E2=80=99m trying to connect to a kerberized Kafka cluster from Flink 1.2.= 0. I=E2=80=99ve configured Flink correctly following instructions to get the credentials from a given keytab. Here is the configuration: security.kerberos.login.keytab: /home/biguardian/biguardian.keytab security.kerberos.login.principal: biguardian security.kerberos.login.use-ticket-cache: false security.kerberos.login.contexts: Client, KafkaClient However, I get this error: org.apache.kafka.common.KafkaException: java.lang.IllegalArgumentException: Could not find a 'KafkaClient' entry in `/tmp/jaas-522055201249067191.conf` Indeed, the JAAS file is empty. Do yon know what may be happening? Diego Fustes Villad=C3=B3niga, Arquitecto Big Data, CCIM --f40304387f4ce9fdcb054ceb965f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable =
Hi Diego,

I think the problem is here:

security.kerberos.login.co= ntexts: Client, KafkaClient

The space = between =E2=80=9CClient,=E2=80=9D and =E2=80=9CKafkaClient=E2=80=9D is caus= ing the problem. Removing it should fix your issue.

Cheers,
G= ordon
<= /div>

On April 11, 2017 at 3:24:20 AM, Diego Fu= stes Villad=C3=B3niga (dfustes@oesia.c= om) wrote:

Hi all,

=C2=A0

I=E2=80=99m trying to connect to a kerberized Kafka = cluster from Flink 1.2.0. I=E2=80=99ve configured Flink correctly following= instructions to get the credentials from a given keytab. Here is the confi= guration:

=C2=A0

=C2=A0

security.kerberos.login.keytab: /home/biguardian/big= uardian.keytab

security.kerberos.login.principal: biguardian

security.kerberos.login.use-ticket-cache: false

security.kerberos.login.contexts: Client, KafkaClien= t

=C2=A0

=C2=A0

However, I get this error:

=C2=A0

org.apache.kafka.common.KafkaException: jav= a.lang.IllegalArgumentException: Could not find a 'KafkaClient' ent= ry in `/tmp/jaas-522055201249067191.conf`

=C2=A0

Indeed, the JAAS file is empty.

=C2=A0

Do yon know what may be happening?

=C2=A0

Diego Fustes= Villad=C3=B3niga, Arquitecto Big Data, CCIM

=C2=A0

--f40304387f4ce9fdcb054ceb965f--