kafka-jira mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Wenjie Zhang (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (KAFKA-6219) Inconsistent behavior for kafka-consumer-groups
Date Tue, 05 Dec 2017 23:03:00 GMT

    [ https://issues.apache.org/jira/browse/KAFKA-6219?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16279099#comment-16279099
] 

Wenjie Zhang edited comment on KAFKA-6219 at 12/5/17 11:02 PM:
---------------------------------------------------------------

We are seeing the similar issue. Basically, we have the ACL configured, the read is opened
to all IPs, but the write is restricted to a few IPs.



{code:java}
Current ACLs for resource `Topic:<topic name>`: 
        User:* has Allow permission for operations: Write from hosts: <IP>
	User:* has Allow permission for operations: Describe from hosts: <IP>
	User:* has Allow permission for operations: Read from hosts: *
{code}

When running *bin/kafka-consumer-groups.sh --list --bootstrap-server <Kafka Host>*,
it does not return anything, but running *bin/kafka-consumer-groups.sh  --describe -group
<group id>* does return the offset information.

BTW, I do have some consumer groups in ZooKeeper, for these consumer groups, *bin/kafka-consumer-groups.sh
--list --zookeeper <ZK Host>* works fine. 


was (Author: wenjiezhang2013@gmail.com):
We are seeing the similar issue. Basically, we have the ACL configured, the read is opened
to all IPs, but the write is restricted to a few IPs.



{code:java}
Current ACLs for resource `Topic:<topic name>`: 
 	User:* has Allow permission for operations: Describe from hosts: <host ip>
{code}

When running *bin/kafka-consumer-groups.sh --list --bootstrap-server <Kafka Host>*,
it does not return anything, but running *bin/kafka-consumer-groups.sh  --describe -group
<group id>* does return the offset information.

BTW, I do have some consumer groups in ZooKeeper, for these consumer groups, *bin/kafka-consumer-groups.sh
--list --zookeeper <ZK Host>* works fine. 

> Inconsistent behavior for kafka-consumer-groups
> -----------------------------------------------
>
>                 Key: KAFKA-6219
>                 URL: https://issues.apache.org/jira/browse/KAFKA-6219
>             Project: Kafka
>          Issue Type: Bug
>          Components: admin
>    Affects Versions: 1.0.0
>            Reporter: huxihx
>            Assignee: huxihx
>
> For example, when ACL is enabled, running kafka-consumer-groups.sh --describe to describe
a group complains:
> `Error: Executing consumer group command failed due to Not authorized to access group:
Group authorization failed.`
> However, running kafka-consumer-groups.sh --list otherwise returns nothing, confusing
user whether there are no groups at all or something wrong happened.
> In `AdminClient.listAllGroups`, it captures all the possible exceptions and returns an
empty List.
> It's better keep those two methods consistent. Does it make any sense?



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message