Class SentryKafkaAuthorizer missing

[#1]

Hi,

 on CDH 5.9.0 (from parcel 5.9.0-1.cdh5.9.0.p0.23) tried to enable Kafka from parcel 2.0.2-1.2.0.2.p0.5. Kafka brokers cannot start up, because the class SentryKafkaAuthorizer  is missing.

I tried to copy Sentry JARs to Kafka lib directory under /opt/cloudera/parcels/KAFKA/lib/kafka/libs/ but it did not helped.

The Kafka CM configuration seems to be ok, Sentry dependency is set, in /etc/kafka/conf a sentry configuration is there.

Does anybody have an idea what could cause the problem?

Thanks

Tomas

Fatal error during KafkaServerStartable startup. Prepare to shutdown

java.lang.ClassNotFoundException: org.apache.sentry.kafka.authorizer.SentryKafkaAuthorizer

         at java.net.URLClassLoader$1.run(URLClassLoader.java:366)

         at java.net.URLClassLoader$1.run(URLClassLoader.java:355)

[#2 · Accepted solution]

Probably the problem will be that the CDH has old version of Sentry (sentry-1.5.1+cdh5.9.0+261).

The Kafka broker needs a sentry-binding-kafka.jar file, which should be available in Sentry 1.7.

"Starting from 1.7.0 release, Apache Sentry has Kafka binding that can be used to enable authorization in Apache Kafka with Apache Sentry."

Confirmed here> https://cwiki.apache.org/confluence/display/SENTRY/Apache+Kafka+Authorization+with+Apache+Sentry