kafka-security-manager icon indicating copy to clipboard operation
kafka-security-manager copied to clipboard

"NoAuth for /kafka-acl/Group" keeperexception using zookeeperclient authorizer

Open ginobaltazar7 opened this issue 4 years ago • 1 comments

Hi Stephane,

Looking for help/documentation with getting this error attempting to run KSM – we’re running secure auth on zookeepers, what do principals need to work around this error? We are already using an spn called 'kafka'

Error ->

INFO [ZooKeeperClient ACL authorizer] Connected. (kafka.zookeeper.ZooKeeperClient) Exception in thread "main" org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /kafka-acl/Group

GetAcl's output ->

[zk: localhost:2181(CONNECTED) 1] getAcl /kafka-acl/Group 'world,'anyone : r 'sasl,'kafka : cdrwa

ginobaltazar7 avatar Jun 15 '21 20:06 ginobaltazar7

https://kafka.apache.org/documentation/#zk_authz

This is the only we can point to. But it seems you're not having an error, this is an INFO message.

We can only help with KSM related errors

— Stephane Maarek https://www.conduktor.io/

--- original message --- On 15 June 2021 at 10:34 PM CEST @.*** wrote:

Hi Stephane,

Looking for help/documentation with getting this error attempting to run KSM – we’re running secure auth on zookeepers, what do principals need to work around this error? We are already using an spn called 'kafka'

Error ->

INFO [ZooKeeperClient ACL authorizer] Connected. (kafka.zookeeper.ZooKeeperClient)

Exception in thread "main" org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /kafka-acl/Group

GetAcl's output ->

[zk: localhost:2181(CONNECTED) 1] getAcl /kafka-acl/Group

'world,'anyone

: r

'sasl,'kafka

: cdrwa

You are receiving this because you are subscribed to this thread.

Reply to this email directly, view it on GitHub, or unsubscribe. --- end of original message ---

simplesteph avatar Jun 16 '21 08:06 simplesteph