conduktor / kafka-security-manager

Manage your Kafka ACL at scale
https://hub.docker.com/r/simplesteph/kafka-security-manager
MIT License
359 stars 159 forks source link

"NoAuth for /kafka-acl/Group" keeperexception using zookeeperclient authorizer #109

Open ginobaltazar7 opened 3 years ago

ginobaltazar7 commented 3 years ago

Hi Stephane,

Looking for help/documentation with getting this error attempting to run KSM – we’re running secure auth on zookeepers, what do principals need to work around this error? We are already using an spn called 'kafka'

Error ->

INFO [ZooKeeperClient ACL authorizer] Connected. (kafka.zookeeper.ZooKeeperClient) Exception in thread "main" org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /kafka-acl/Group

GetAcl's output ->

[zk: localhost:2181(CONNECTED) 1] getAcl /kafka-acl/Group 'world,'anyone : r 'sasl,'kafka : cdrwa

simplesteph commented 3 years ago

https://kafka.apache.org/documentation/#zk_authz

This is the only we can point to. But it seems you're not having an error, this is an INFO message.

We can only help with KSM related errors

— Stephane Maarek https://www.conduktor.io/

--- original message --- On 15 June 2021 at 10:34 PM CEST @.*** wrote:

Hi Stephane,

Looking for help/documentation with getting this error attempting to run KSM – we’re running secure auth on zookeepers, what do principals need to work around this error? We are already using an spn called 'kafka'

Error ->

INFO [ZooKeeperClient ACL authorizer] Connected. (kafka.zookeeper.ZooKeeperClient)

Exception in thread "main" org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /kafka-acl/Group

GetAcl's output ->

[zk: localhost:2181(CONNECTED) 1] getAcl /kafka-acl/Group

'world,'anyone

: r

'sasl,'kafka

: cdrwa

You are receiving this because you are subscribed to this thread.

Reply to this email directly, view it on GitHub, or unsubscribe. --- end of original message ---