I'm having trouble with 'Cannot change principals during re-authentication from A: B' - Githubissues

aws / aws-msk-iam-auth

Enables developers to use AWS Identity and Access Management (IAM) to connect to their Amazon Managed Streaming for Apache Kafka (Amazon MSK) clusters.

Apache License 2.0

137 stars 65 forks source link

I'm having trouble with 'Cannot change principals during re-authentication from A: B' #104

Open ksundong opened 1 year ago

ksundong commented 1 year ago

Environment

org.apache.kafka:kafka-clients:3.1.1
software.amazon.msk:aws-msk-iam-auth:1.1.5
org.springframework.cloud:spring-cloud-stream:3.2.1
org.springframework.cloud:spring-cloud-stream-binder-kafka:3.2.1
org.springframework.boot:spring-boot:2.7.1

Log

server 2023-01-31 14:05:26.312 ERROR 7 --- [container-0-C-1] o.s.k.l.KafkaMessageListenerContainer   :149 : Authentication/Authorization Exception, retrying in 10000 ms
server
server org.apache.kafka.common.errors.SaslAuthenticationException: Cannot change principals during re-authentication from A: B

Why server cannot change A to B?
How can I fix it?

amplexus commented 3 months ago

Set AWS_ROLE_SESSION_NAME. See https://github.com/jmaver-plume/kafkajs-msk-iam-authentication-mechanism/issues/20 for more info.

ksundong commented 2 months ago

@amplexus I'll try it, thanks.