[jira] [Updated] (KAFKA-4984) Unable to produce or consume when enabling authentication SASL/Kerberos

[Ait haj Slimane (JIRA)]

     [ 
https://issues.apache.org/jira/browse/KAFKA-4984?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ait haj Slimane updated KAFKA-4984:
-----------------------------------
    Description: 
I have a problem while trying to produce or consume on kerberos enabled cluster.
I launched a single broker and a console producer,
using the SASL authentication between producer and broker.
When i run the producer ,I got the result attached below

Any advice on what can cause the problem.

Thanks!
================================
configuration used:

server.properties:
listeners=SASL_PLAINTEXT://kafka.example.com:9092
security.inter.broker.protocol=SASL_PLAINTEXT
sasl.mechanism.inter.broker.protocol=GSSAPI
sasl.enabled.mechanism=GSSAPI
sasl.kerberos.service.name=kafka

producer.properties
bootstrap.servers=kafka.example.com:9092
sasl.kerberos.service.name=kafka
security.protocol=SASL_PLAINTEXT

kafka_client_jaas.conf

KafkaClient {
    com.sun.security.auth.module.Krb5LoginModule required
    useKeyTab=true
    storeKey=true
    keyTab="/etc/kafka/keytabs/kafkaclient.keytab"
    principal="kafkaclient/kafka.example....@example.com";
};

  was:
I have a problem while trying to produce or consume on kerberos enabled cluster.
I launched a single broker and a console producer,
using the SASL_PLAIN authentication between producer and broker.
When i run the producer ,I got the result attached below

Any advice on what can cause the problem.

Thanks!
================================
configuration used:

server.properties:
listeners=SASL_PLAINTEXT://kafka.example.com:9092
security.inter.broker.protocol=SASL_PLAINTEXT
sasl.mechanism.inter.broker.protocol=GSSAPI
sasl.enabled.mechanism=GSSAPI
sasl.kerberos.service.name=kafka

producer.properties
bootstrap.servers=kafka.example.com:9092
sasl.kerberos.service.name=kafka
security.protocol=SASL_PLAINTEXT

kafka_client_jaas.conf

KafkaClient {
    com.sun.security.auth.module.Krb5LoginModule required
    useKeyTab=true
    storeKey=true
    keyTab="/etc/kafka/keytabs/kafkaclient.keytab"
    principal="kafkaclient/kafka.example....@example.com";
};


> Unable to produce or consume when enabling authentication SASL/Kerberos
> -----------------------------------------------------------------------
>
>                 Key: KAFKA-4984
>                 URL: https://issues.apache.org/jira/browse/KAFKA-4984
>             Project: Kafka
>          Issue Type: Bug
>         Environment: Ubuntu 16.04LTS running in VirtualBox
>            Reporter: Ait haj Slimane
>         Attachments: Screenshot from 2017-03-30 15-36-30.png
>
>
> I have a problem while trying to produce or consume on kerberos enabled 
> cluster.
> I launched a single broker and a console producer,
> using the SASL authentication between producer and broker.
> When i run the producer ,I got the result attached below
> Any advice on what can cause the problem.
> Thanks!
> ================================
> configuration used:
> server.properties:
> listeners=SASL_PLAINTEXT://kafka.example.com:9092
> security.inter.broker.protocol=SASL_PLAINTEXT
> sasl.mechanism.inter.broker.protocol=GSSAPI
> sasl.enabled.mechanism=GSSAPI
> sasl.kerberos.service.name=kafka
> producer.properties
> bootstrap.servers=kafka.example.com:9092
> sasl.kerberos.service.name=kafka
> security.protocol=SASL_PLAINTEXT
> kafka_client_jaas.conf
> KafkaClient {
>     com.sun.security.auth.module.Krb5LoginModule required
>     useKeyTab=true
>     storeKey=true
>     keyTab="/etc/kafka/keytabs/kafkaclient.keytab"
>     principal="kafkaclient/kafka.example....@example.com";
> };



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)