Return-Path: X-Original-To: apmail-kafka-dev-archive@www.apache.org Delivered-To: apmail-kafka-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id DC643191F2 for ; Mon, 18 Apr 2016 16:28:52 +0000 (UTC) Received: (qmail 39275 invoked by uid 500); 18 Apr 2016 16:28:52 -0000 Delivered-To: apmail-kafka-dev-archive@kafka.apache.org Received: (qmail 39172 invoked by uid 500); 18 Apr 2016 16:28:52 -0000 Mailing-List: contact dev-help@kafka.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@kafka.apache.org Delivered-To: mailing list dev@kafka.apache.org Received: (qmail 39126 invoked by uid 99); 18 Apr 2016 16:28:52 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 18 Apr 2016 16:28:52 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id B5208C216F for ; Mon, 18 Apr 2016 16:28:51 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.181 X-Spam-Level: *** X-Spam-Status: No, score=3.181 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, KAM_BADIPHTTP=2, NORMAL_HTTP_TO_IP=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, WEIRD_PORT=0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id iOqzlDz1HlAF for ; Mon, 18 Apr 2016 16:28:49 +0000 (UTC) Received: from mail-vk0-f51.google.com (mail-vk0-f51.google.com [209.85.213.51]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id AC4B15F23C for ; Mon, 18 Apr 2016 16:28:49 +0000 (UTC) Received: by mail-vk0-f51.google.com with SMTP id n62so110570116vkb.0 for ; Mon, 18 Apr 2016 09:28:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to; bh=1VE0a7rS1ZZvnt6/XfPG5zUQnHxleAAq0MYzbLaeGu4=; b=drtgA65L5h2qvKcWOWzc4fkf+5Y/iB6+ui4uXGtkttQ6nlIUKEMQLmmSXDAWcvhgsj YMu+kXEBjksHMi45HUiJzLfibLG98WzQF7RdzpwVPuifn/KQr5ZSTfKPEa0/QDVuqh2D QT/N6ED22WKpE2NdYkIF4QYzmnx64cFSS1goQQ1gW7vy3TA4yahbXUzd55BBYFhCETH5 QWZRg/Dg6kVnFdhgCa9tduiwXVfyhLMuyJU+o1AN0BAhPHxaVyCb2o63R9OOUO3VMFiA DNimHuzfAxGo5YTqO0u1X9gr/6YSid0CVfev3+hQ/4XrB6WRPuGWvJKXFkD14I89obBH qbXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to; bh=1VE0a7rS1ZZvnt6/XfPG5zUQnHxleAAq0MYzbLaeGu4=; b=DgYuNBNGN25Bl/1ovMbMjeFGTf5RA0XB5KfAL/gduw2RJRQnyMYq1E34CeUk94KOhK IUSFA/TZONjTF3becF2ws7d+qLEU1HzRDvHImzdgwrEfssrtAWx/bnF15p53m3FPxrcV eHiALII+CDcWEsr9X1I6fSREgXITZsz9FSTJk/jbI8m1WQZUj15lpzmPsZUZO54fUFdQ h1QLx2kMF4VgNfgFsvtfbxh30JjTkS3wWdR5/7Vf6PX14uZm9PSzpNuMlkkW4+qZwm8Y mBs5WwoLMkRtKvYXDCgRCfDKwI6lOIdIdcQf0oVFZeGYLwbtyLW2ftx3jEchv8TndH7i /YhQ== X-Gm-Message-State: AOPr4FV7m5UZq5bEjRq6ANmXWsXVOge2dK+hajOsaD3XQRGB6AebOzkUdCjUTwYKfeU5jblh9Xe7fDWWcoO7Kg== MIME-Version: 1.0 X-Received: by 10.31.52.78 with SMTP id b75mr18942015vka.77.1460996929072; Mon, 18 Apr 2016 09:28:49 -0700 (PDT) Received: by 10.176.68.228 with HTTP; Mon, 18 Apr 2016 09:28:49 -0700 (PDT) In-Reply-To: <1460823685.1962484.580692969.056DE12F@webmail.messagingengine.com> References: <1460823685.1962484.580692969.056DE12F@webmail.messagingengine.com> Date: Mon, 18 Apr 2016 09:28:49 -0700 Message-ID: Subject: Re: Reg: Issue with Kafka Kerberos (Kafka Version 0.9.0.1) From: BigData dev To: dev@kafka.apache.org Content-Type: multipart/alternative; boundary=001a11430c7af9b7160530c4dabc --001a11430c7af9b7160530c4dabc Content-Type: text/plain; charset=UTF-8 Hi Harsha, It worked. I need to configure property super.users=User:kafka. (U should be capital in user, because of this issue, I have got the authentication error). Regards, Bharat On Sat, Apr 16, 2016 at 9:21 AM, Harsha wrote: > Bharat, > Did you add super.users=user:kafka to your > server.properties. > -Harsha > > On Tue, Apr 12, 2016, at 05:07 PM, BigData dev wrote: > > Hi All, > > I am facing issue with kafka kerberoized cluster. > > > > After following the steps how to enables SASL on kafka by using below > > link. > > http://docs.confluent.io/2.0.0/kafka/sasl.html > > > > > > > > After this,when i start the kafka-server I am getting below error. > > [2016-04-12 16:59:26,201] ERROR [KafkaApi-1001] error when handling > > request > > > Name:LeaderAndIsrRequest;Version:0;Controller:1001;ControllerEpoch:3;CorrelationId:3;ClientId:1001;Leaders:BrokerEndPoint(1001, > > hostname.com,6667);PartitionState:(t1,0) -> > > > (LeaderAndIsrInfo:(Leader:1001,ISR:1001,LeaderEpoch:1,ControllerEpoch:3),ReplicationFactor:1),AllReplicas:1001),(ambari_kafka_service_check,0) > > -> > > > (LeaderAndIsrInfo:(Leader:1001,ISR:1001,LeaderEpoch:2,ControllerEpoch:3),ReplicationFactor:1),AllReplicas:1001) > > (kafka.server.KafkaApis) > > kafka.common.ClusterAuthorizationException: Request > > Request(0,9.30.150.20:6667-9.30.150.20:37550,Session(User:kafka,/ > 9.30.150.20),null,1460505566200,SASL_PLAINTEXT) > > is not authorized. > > at kafka.server.KafkaApis.authorizeClusterAction(KafkaApis.scala:910) > > at > > kafka.server.KafkaApis.handleLeaderAndIsrRequest(KafkaApis.scala:113) > > at kafka.server.KafkaApis.handle(KafkaApis.scala:72) > > at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:60) > > at java.lang.Thread.run(Thread.java:745) > > > > > > Regards, > > Bharat > --001a11430c7af9b7160530c4dabc--