Created 04-25-2022 12:52 AM
Hello Team,
can you please advise why connection to Kafka fails? Is the issue with keytab? Keytab is working fine on Linux machine.
sasl.jaas.config= com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true keyTab="D:\services.kerberos.keytab" principal="services/rb-hadoop-06.mtg.local@INNOV.LOCAL";
org.apache.kafka.common.KafkaException: Failed to create new KafkaAdminClient
at org.apache.kafka.clients.admin.KafkaAdminClient.createInternal(KafkaAdminClient.java:540)
at org.apache.kafka.clients.admin.Admin.create(Admin.java:134)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin$.$anonfun$create$2(PluginsAwareKafkaAdmin.scala:17)
at io.conduktor.plugins.PluginsResources$$anon$1.executeWithPlugins(PluginsResources.scala:74)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin$.$anonfun$create$1(PluginsAwareKafkaAdmin.scala:17)
at scala.util.Try$.apply(Try.scala:210)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin$.create(PluginsAwareKafkaAdmin.scala:17)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin.create(PluginsAwareKafkaAdmin.scala)
at io.conduktor.kafka.KafkaClientMaker.makeAdminClient(KafkaClientMaker.kt:103)
at io.conduktor.kafka.KafkaClientMaker.checkConnectivity(KafkaClientMaker.kt:79)
at io.conduktor.views.clusterconfiguration.KafkaCluster$kafkaClusterConfigTab$1$2$1$11$1$2$1$1.invokeSuspend(KafkaCluster.kt:334)
at io.conduktor.views.clusterconfiguration.KafkaCluster$kafkaClusterConfigTab$1$2$1$11$1$2$1$1.invoke(KafkaCluster.kt)
at io.conduktor.views.clusterconfiguration.KafkaCluster$kafkaClusterConfigTab$1$2$1$11$1$2$1$1.invoke(KafkaCluster.kt)
at io.conduktor.JavaFxExtensionsKt$launchWithProgressCancelable$job$1.invokeSuspend(JavaFxExtensions.kt:353)
at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:106)
at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:571)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:750)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:678)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:665)
Caused by: org.apache.kafka.common.KafkaException: javax.security.auth.login.LoginException: null (68)
at org.apache.kafka.common.network.SaslChannelBuilder.configure(SaslChannelBuilder.java:184)
at org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:192)
at org.apache.kafka.common.network.ChannelBuilders.clientChannelBuilder(ChannelBuilders.java:81)
at org.apache.kafka.clients.ClientUtils.createChannelBuilder(ClientUtils.java:105)
at org.apache.kafka.clients.admin.KafkaAdminClient.createInternal(KafkaAdminClient.java:513)
... 19 more
Caused by: javax.security.auth.login.LoginException: null (68)
at jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Unknown Source)
at jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.login(Unknown Source)
at java.base/javax.security.auth.login.LoginContext.invoke(Unknown Source)
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown Source)
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown Source)
at java.base/java.security.AccessController.doPrivileged(Unknown Source)
at java.base/javax.security.auth.login.LoginContext.invokePriv(Unknown Source)
at java.base/javax.security.auth.login.LoginContext.login(Unknown Source)
at org.apache.kafka.common.security.authenticator.AbstractLogin.login(AbstractLogin.java:60)
at org.apache.kafka.common.security.kerberos.KerberosLogin.login(KerberosLogin.java:103)
at org.apache.kafka.common.security.authenticator.LoginManager.<init>(LoginManager.java:62)
at org.apache.kafka.common.security.authenticator.LoginManager.acquireLoginManager(LoginManager.java:105)
at org.apache.kafka.common.network.SaslChannelBuilder.configure(SaslChannelBuilder.java:170)
... 23 more
Caused by: KrbException: null (68)
at java.security.jgss/sun.security.krb5.KrbAsRep.<init>(Unknown Source)
at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.send(Unknown Source)
at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.action(Unknown Source)
... 36 more
Caused by: KrbException: Identifier doesn't match expected value (906)
at java.security.jgss/sun.security.krb5.internal.KDCRep.init(Unknown Source)
at java.security.jgss/sun.security.krb5.internal.ASRep.init(Unknown Source)
at java.security.jgss/sun.security.krb5.internal.ASRep.<init>(Unknown Source)
... 39 more
Created 04-25-2022 07:59 AM
Have you tried specifying the krav path as shown below instead?
keyTab="D:/services.kerberos.keytab"
Please use a forward slash instead of a backslash.
Cheers
Andre