Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]
Created 04-25-2022 12:52 AM
Hello Team,
can you please advise why connection to Kafka fails? Is the issue with keytab? Keytab is working fine on Linux machine.
sasl.jaas.config= com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true keyTab="D:\services.kerberos.keytab" principal="services/[email protected]";
org.apache.kafka.common.KafkaException: Failed to create new KafkaAdminClient
at org.apache.kafka.clients.admin.KafkaAdminClient.createInternal(KafkaAdminClient.java:540)
at org.apache.kafka.clients.admin.Admin.create(Admin.java:134)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin$.$anonfun$create$2(PluginsAwareKafkaAdmin.scala:17)
at io.conduktor.plugins.PluginsResources$$anon$1.executeWithPlugins(PluginsResources.scala:74)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin$.$anonfun$create$1(PluginsAwareKafkaAdmin.scala:17)
at scala.util.Try$.apply(Try.scala:210)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin$.create(PluginsAwareKafkaAdmin.scala:17)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin.create(PluginsAwareKafkaAdmin.scala)
at io.conduktor.kafka.KafkaClientMaker.makeAdminClient(KafkaClientMaker.kt:103)
at io.conduktor.kafka.KafkaClientMaker.checkConnectivity(KafkaClientMaker.kt:79)
at io.conduktor.views.clusterconfiguration.KafkaCluster$kafkaClusterConfigTab$1$2$1$11$1$2$1$1.invokeSuspend(KafkaCluster.kt:334)
at io.conduktor.views.clusterconfiguration.KafkaCluster$kafkaClusterConfigTab$1$2$1$11$1$2$1$1.invoke(KafkaCluster.kt)
at io.conduktor.views.clusterconfiguration.KafkaCluster$kafkaClusterConfigTab$1$2$1$11$1$2$1$1.invoke(KafkaCluster.kt)
at io.conduktor.JavaFxExtensionsKt$launchWithProgressCancelable$job$1.invokeSuspend(JavaFxExtensions.kt:353)
at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:106)
at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:571)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:750)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:678)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:665)
Caused by: org.apache.kafka.common.KafkaException: javax.security.auth.login.LoginException: null (68)
at org.apache.kafka.common.network.SaslChannelBuilder.configure(SaslChannelBuilder.java:184)
at org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:192)
at org.apache.kafka.common.network.ChannelBuilders.clientChannelBuilder(ChannelBuilders.java:81)
at org.apache.kafka.clients.ClientUtils.createChannelBuilder(ClientUtils.java:105)
at org.apache.kafka.clients.admin.KafkaAdminClient.createInternal(KafkaAdminClient.java:513)
... 19 more
Caused by: javax.security.auth.login.LoginException: null (68)
at jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Unknown Source)
at jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.login(Unknown Source)
at java.base/javax.security.auth.login.LoginContext.invoke(Unknown Source)
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown Source)
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown Source)
at java.base/java.security.AccessController.doPrivileged(Unknown Source)
at java.base/javax.security.auth.login.LoginContext.invokePriv(Unknown Source)
at java.base/javax.security.auth.login.LoginContext.login(Unknown Source)
at org.apache.kafka.common.security.authenticator.AbstractLogin.login(AbstractLogin.java:60)
at org.apache.kafka.common.security.kerberos.KerberosLogin.login(KerberosLogin.java:103)
at org.apache.kafka.common.security.authenticator.LoginManager.<init>(LoginManager.java:62)
at org.apache.kafka.common.security.authenticator.LoginManager.acquireLoginManager(LoginManager.java:105)
at org.apache.kafka.common.network.SaslChannelBuilder.configure(SaslChannelBuilder.java:170)
... 23 more
Caused by: KrbException: null (68)
at java.security.jgss/sun.security.krb5.KrbAsRep.<init>(Unknown Source)
at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.send(Unknown Source)
at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.action(Unknown Source)
... 36 more
Caused by: KrbException: Identifier doesn't match expected value (906)
at java.security.jgss/sun.security.krb5.internal.KDCRep.init(Unknown Source)
at java.security.jgss/sun.security.krb5.internal.ASRep.init(Unknown Source)
at java.security.jgss/sun.security.krb5.internal.ASRep.<init>(Unknown Source)
... 39 more
Created 04-25-2022 07:59 AM
Have you tried specifying the krav path as shown below instead?
keyTab="D:/services.kerberos.keytab"
Please use a forward slash instead of a backslash.
Cheers
Andre