[
https://issues.apache.org/jira/browse/KAFKA-4119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15470107#comment-15470107
]
Rajini Sivaram commented on KAFKA-4119:
---------------------------------------
Only the new consumer supports security. So if you have consumer groups with
offsets using the old consumer, you should migrate the offsets from Zookeeper
to Kafka as described in
http://kafka.apache.org/documentation.html#offsetmigration. For the new
consumer offsets stored in Kafka, you can list offsets using
kafka-consumer-groups.sh with the --new-consumer option.
> Get topic offset with Kafka SSL&ACL
> -----------------------------------
>
> Key: KAFKA-4119
> URL: https://issues.apache.org/jira/browse/KAFKA-4119
> Project: Kafka
> Issue Type: Bug
> Components: core
> Affects Versions: 0.10.0.1
> Environment: Linux
> Reporter: zhang shuai
> Labels: kafka-acl, offset, ssl&acl
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> I have a kafka cluster with SSL&ACL when i trun off ACL,i can get offset form
> kafka-consumer-offset-checker.sh
> [root@node128 kafka_2.11-0.10.0.1]# bin/kafka-consumer-offset-checker.sh
> --zookeeper localhost:2181/kafka-test --group consumer-group-1 --topic
> testtopic
> [2016-09-03 14:03:51,722] WARN WARNING: ConsumerOffsetChecker is deprecated
> and will be dropped in releases following 0.9.0. Use ConsumerGroupCommand
> instead. (kafka.tools.ConsumerOffsetChecker$)
> Group Topic Pid Offset logSize
> Lag Owner
> consumer-group-1 testtopic 0 99981 99981
> 0 none
> Configuration like this:
> ssl.keystore.location=/opt/ssl_key/server.keystore.jks
> ssl.keystore.password=xdata123
> ssl.key.password=xdata123
> ssl.truststore.location=/opt/ssl_key/server.truststore.jks
> ssl.truststore.password=xdata123
> ssl.client.auth=required
> ssl.enabled.protocols=TLSv1.2,TLSv1.1,TLSv1
> ssl.keystore.type=JKS
> ssl.truststore.type=JKS
> security.inter.broker.protocol=SSL
> But when i want to use ACL and add configuration
> authorizer.class.name=kafka.security.auth.SimpleAclAuthorizer
> super.users=User:CN=node128,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown;User:CN=node129,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown
> Then I use kafka-acls.sh to add principal for topic testtopic and group
> consumer-group-1，
> I cannot get result of kafka offset from kafka-consumer-offset-checker.sh. Is
> there something deferent in ACL? How can I get topics` offset in kafka ACL
> model?
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
