Skip to main content
roshanbi
Gold ⭐️
April 25, 2022
Question

conduktor connection error

Hello Team,

 

can you please advise why connection to Kafka fails? Is the issue with keytab? Keytab is working fine on Linux machine.

sasl.jaas.config= com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true keyTab="D:\services.kerberos.keytab" principal="services/rb-hadoop-06.mtg.local@INNOV.LOCAL";

 

org.apache.kafka.common.KafkaException: Failed to create new KafkaAdminClient
at org.apache.kafka.clients.admin.KafkaAdminClient.createInternal(KafkaAdminClient.java:540)
at org.apache.kafka.clients.admin.Admin.create(Admin.java:134)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin$.$anonfun$create$2(PluginsAwareKafkaAdmin.scala:17)
at io.conduktor.plugins.PluginsResources$$anon$1.executeWithPlugins(PluginsResources.scala:74)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin$.$anonfun$create$1(PluginsAwareKafkaAdmin.scala:17)
at scala.util.Try$.apply(Try.scala:210)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin$.create(PluginsAwareKafkaAdmin.scala:17)
at io.conduktor.kafka.plugins.PluginsAwareKafkaAdmin.create(PluginsAwareKafkaAdmin.scala)
at io.conduktor.kafka.KafkaClientMaker.makeAdminClient(KafkaClientMaker.kt:103)
at io.conduktor.kafka.KafkaClientMaker.checkConnectivity(KafkaClientMaker.kt:79)
at io.conduktor.views.clusterconfiguration.KafkaCluster$kafkaClusterConfigTab$1$2$1$11$1$2$1$1.invokeSuspend(KafkaCluster.kt:334)
at io.conduktor.views.clusterconfiguration.KafkaCluster$kafkaClusterConfigTab$1$2$1$11$1$2$1$1.invoke(KafkaCluster.kt)
at io.conduktor.views.clusterconfiguration.KafkaCluster$kafkaClusterConfigTab$1$2$1$11$1$2$1$1.invoke(KafkaCluster.kt)
at io.conduktor.JavaFxExtensionsKt$launchWithProgressCancelable$job$1.invokeSuspend(JavaFxExtensions.kt:353)
at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:106)
at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:571)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:750)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:678)
at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:665)
Caused by: org.apache.kafka.common.KafkaException: javax.security.auth.login.LoginException: null (68)
at org.apache.kafka.common.network.SaslChannelBuilder.configure(SaslChannelBuilder.java:184)
at org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:192)
at org.apache.kafka.common.network.ChannelBuilders.clientChannelBuilder(ChannelBuilders.java:81)
at org.apache.kafka.clients.ClientUtils.createChannelBuilder(ClientUtils.java:105)
at org.apache.kafka.clients.admin.KafkaAdminClient.createInternal(KafkaAdminClient.java:513)
... 19 more
Caused by: javax.security.auth.login.LoginException: null (68)
at jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Unknown Source)
at jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.login(Unknown Source)
at java.base/javax.security.auth.login.LoginContext.invoke(Unknown Source)
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown Source)
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown Source)
at java.base/java.security.AccessController.doPrivileged(Unknown Source)
at java.base/javax.security.auth.login.LoginContext.invokePriv(Unknown Source)
at java.base/javax.security.auth.login.LoginContext.login(Unknown Source)
at org.apache.kafka.common.security.authenticator.AbstractLogin.login(AbstractLogin.java:60)
at org.apache.kafka.common.security.kerberos.KerberosLogin.login(KerberosLogin.java:103)
at org.apache.kafka.common.security.authenticator.LoginManager.<init>(LoginManager.java:62)
at org.apache.kafka.common.security.authenticator.LoginManager.acquireLoginManager(LoginManager.java:105)
at org.apache.kafka.common.network.SaslChannelBuilder.configure(SaslChannelBuilder.java:170)
... 23 more
Caused by: KrbException: null (68)
at java.security.jgss/sun.security.krb5.KrbAsRep.<init>(Unknown Source)
at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.send(Unknown Source)
at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.action(Unknown Source)
... 36 more
Caused by: KrbException: Identifier doesn't match expected value (906)
at java.security.jgss/sun.security.krb5.internal.KDCRep.init(Unknown Source)
at java.security.jgss/sun.security.krb5.internal.ASRep.init(Unknown Source)
at java.security.jgss/sun.security.krb5.internal.ASRep.<init>(Unknown Source)
... 39 more

1 reply

araujo
Platinum ⭐️⭐️⭐️
Platinum ⭐️⭐️⭐️
April 25, 2022

@roshanbi 

 

Have you tried specifying the krav path as shown below instead?

 

keyTab="D:/services.kerberos.keytab"

 

Please use a forward slash instead of a backslash.

 

Cheers

Andre

 

Translate
-- Was your question answered? Please take some time to click on "Accept as Solution" below this post. If you find a reply useful, say thanks by clicking on the thumbs up button.