[ 
https://issues.apache.org/jira/browse/NIFI-14059?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17909100#comment-17909100
 ] 

Paul Grey commented on NIFI-14059:
----------------------------------

[https://github.com/apache/nifi/pull/9607/files]

I've opened a pull request that adds the needed component properties.  A couple 
of notes:
 * with these properties, the kafka-shared support classes seem to now do the 
right thing
 * if you're comparing / contrasting previous Kafka component behavior, please 
be aware that Java 21 (NiFi 2) does not seem to be compatible with older 
SASL/Kerberos mechanisms that worked with Java 8 (NiFi 1).  In particular, it 
was necessary to add these algorithms to the "permitted_enctypes" in my 
Kerberos server config:
 ** aes256-cts-hmac-sha1-96
 ** aes128-cts-hmac-sha1-96
 * I tested using the new controller service property "Kerberos User Service".  
There was an analogous property "Kerberos Credentials Service" that was also 
previously available, so I added it as well.

> Kafka3ConnectionService : no property for required KerberosUserService
> ----------------------------------------------------------------------
>
>                 Key: NIFI-14059
>                 URL: https://issues.apache.org/jira/browse/NIFI-14059
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Core Framework
>    Affects Versions: 2.0.0
>         Environment: Redhat Linux
>            Reporter: Ron Ridgely
>            Priority: Major
>         Attachments: nifi-kafka.jpg
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The following error prevents successful enabling of the 
> Kafka3ConnectionService:
> Cannot invoke "org.apache.nifi.kerberosUserService.createKerberosUser()" 
> because  KerberosUserService is null.
> However, there is no property available to be configured in the processor.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to