The above solution is working when I do kinit of kafka service keytab. My Kafka jaas file is as below. kafka_jaas.conf KafkaServer { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true storeKey=true keyTab="/home/ec2-user/kafka.service.keytab" principal="kafka/<public DNS>@EXAMPLE.COM"; }; Client { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true storeKey=true keyTab="/home/ec2-user/kafka.service.keytab" principal="kafka/<public DNS>@EXAMPLE.COM"; }; KafkaClient { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true storeKey=true keyTab="/home/ec2-user/kafka.service.keytab" principal="kafka/<public DNS>@EXAMPLE.COM"; }; When I destroyed the ticket, I am getting below error. WARN Error getting policies. secureMode=true, user=root (auth:KERBEROS), response={"httpStatusCode":401,"statusCode":0}, serviceName=KafkaTest (org.apache.ranger.admin.client.RangerAdminRESTClient) After looking into error, I found the user is coming as root (highlighted above). I don't want to run kinit command explicitly and that's why I provided KafkaClient in my jaas file above. I did export KAFKA_OPTS and pass this jass file. Can you please help me with what I have done wrong here. Thanks for all your help!
... View more
