Hi Ashok, Did you tried to configure krb5.conf and krb5JAASLogin.conf files?
Thanks, Subash On Mon, Sep 10, 2018 at 7:19 PM AshokKumar J <ashokkumar...@gmail.com> wrote: > When the Kafka stream app is started, the following jaas file is being > used. However, the tickets are not being renewed automatically by the > stream application. It fails with the exception below after the ticket > expires. What should we do to keep the Kerberos ticket automatically > renewed? > > KafkaClient { > com.sun.security.auth.module.Krb5LoginModule required > doNotPrompt=true > useTicketCache=true > principal="as...@dev.acm.com" > useKeyTab=true > serviceName="kafka" > keyTab="/home/astvy/astvy.headless.keytab" > renewTGT=true > client=true; > }; > > Error > > Abort sending since an error caught with a previous record (key ED1812 > value org.cox.model.HourlyUnit@83e6c99 timestamp 1536165112061) to > topic dub_hourlyunit_source1 due to > org.apache.kafka.common.errors.SaslAuthenticationException: > An error: (java.security.PrivilegedActionException: > javax.security.sasl.SaslException: > GSS initiate failed [Caused by GSSException: No valid credentials > provided (Mechanism level: Failed to find any Kerberos tgt)]) occurred > when evaluating SASL token received from the Kafka Broker. > Kafka Client will go to AUTHENTICATION_FAILED state. > -- Thanks and Regards, Subash Konar