kafka with sentry and kerberos CDH 5.13

[#1]

Hello,

I installed apache kafka and sentry on CDH (5.13), but the problem is that I am not able to create roles using the command kafka-sentry. (I executed the command with a superuser account)

I found this error on my log file:

ERROR transport.TSaslTransport: SASL negotiation failure
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]

Any help please ?

[#2]

The error indicates your client (kafka-sentry) tries to connect with Kafka service but does not show up any valid ticket from KDC. So try to obtain a valid ticket first with kinit and then try again.

[#3 · Accepted solution]

Thank you.

I switched kafka user and executed the privileges commands of (kafka-sentry) and the error disappears

[#4]

Congratulations on solving the issue. Can you please mark the appropriate reply as the solution to your issue. This way it can assist others facing a similar situation.