housepower / clickhouse_sinker

Easily load data from kafka to ClickHouse
https://housepower.github.io/clickhouse_sinker
Apache License 2.0
515 stars 118 forks source link

failed to auth with kafka 1.1 kerberos #144

Closed yuzhichang closed 1 year ago

yuzhichang commented 2 years ago

144_1 144_2 144_3

twmb commented 2 years ago

Maybe related, perhaps from the underlying gokrb5 library?

https://github.com/jcmturner/gokrb5/issues/367 perhaps https://github.com/jcmturner/gokrb5/issues/161

(I haven't read into these issues in depth, kerberos is a bit of a black box to me)

yuzhichang commented 1 year ago

I finally figured out the root cause. If broker's principal is in format <service>/<broker_fqdn>, server.properties shall be changed to:

advertised.listeners=SASL_PLAINTEXT://<broker_fqdn>:9092