Member since
11-28-2017
1
Post
0
Kudos Received
0
Solutions
11-29-2017
01:17 AM
We would like to be able to authenticate users to our kafka cluster with simple username/password. We installed HDF-3.0.1.1 Kafka, kerberized the cluster, installed ranger + kafka-plugin and added a user 'test'. We set sasl.enabled.mechanisms=GSSAPI, PLAIN
sasl.mechanism.inter.broker.protocol=GSSAPI in kafka server.properties to allow the cluster to use kerberos and clients to use PLAIN authentication. But this does not work. The console-producer logs INFO Successfully logged in. (org.apache.kafka.common.security.authenticator.AbstractLogin) and after a while: ERROR Error when sending message to topic testtopic2 with key: null, value: 28 bytes with error: (org.apache.kafka.clients.producer.internals.ErrorLoggingCallback)
org.apache.kafka.common.errors.TimeoutException: Failed to update metadata after 60000 ms.
INFO Closing the Kafka producer with timeoutMillis = 9223372036854775807 ms. (org.apache.kafka.clients.producer.KafkaProducer) In the meantime it continuously tries to connect to the kafka hosts. The producer properties are: sasl.mechanism=PLAIN
security.protocol=SASL_PLAINTEXT and our kafka_client_jaas.conf look like this: KafkaClient {
org.apache.kafka.common.security.plain.PlainLoginModule required
username="test"
password="XXXXXXXXX";
}; What is going wrong here or is it simply not possible to use username/password authentication with the kafka ranger plugin? Kind Regards Peter
... View more
Labels:
- Labels:
-
Apache Ambari
-
Apache Kafka
-
Apache Ranger