createAcls error: failed to create one or more acl rules: kafka server: unexpected (unknown?) server error

[hupeipei888]

Description

there was an error when create acl with sarama client and no log output for kafka server server.log

config := sarama.NewConfig()

config.Version = sarama.V3_4_0_0
config.Net.SASL.Enable = true
config.Net.SASL.Mechanism = sarama.SASLTypePlaintext
config.Net.SASL.User = "admin"
config.Net.SASL.Password = "admin"

admin, err := sarama.NewClusterAdmin([]string{"192.168.0.176:9092"}, config)
if err != nil {
panic(err)
}

rACLs := []*sarama.ResourceAcls{
{
	Resource: sarama.Resource{ResourceType: sarama.AclResourceTopic, ResourceName: "test"},
	Acls: []*sarama.Acl{
		{Host: "localhost", Operation: sarama.AclOperationAlter, PermissionType: sarama.AclPermissionAllow, Principal: "test"},
	},
},
{
	Resource: sarama.Resource{ResourceType: sarama.AclResourceGroup, ResourceName: "test"},
	Acls: []*sarama.Acl{
		{Host: "localhost", Operation: sarama.AclOperationAlter, PermissionType: sarama.AclPermissionAllow, Principal: "test"},
	},
},
}

err = admin.CreateACLs(rACLs)
if err != nil {
panic(err)
}

Versions

Sarama	Kafka	Go
1.41.1	kafka-2.13_3.4.0	1.20.6

Configuration

sasl info for kafka kafka_server_jaas.conf

KafkaServer {
        org.apache.kafka.common.security.plain.PlainLoginModule required
        username="admin"
        password="admin"
        user_admin="admin";
};

KafkaClient {
        org.apache.kafka.common.security.plain.PlainLoginModule required
        username="admin"
        password="admin";
};


Client {
        org.apache.zookeeper.server.auth.DigestLoginModule required
        username="admin"
        password="admin";
};

Server {
        org.apache.kafka.common.security.plain.PlainLoginModule required
        username="admin"
        password="admin"
        user_admin="admin";
};

sasl info for zookeeper zoo_jaas.conf

Server {
    org.apache.zookeeper.server.auth.DigestLoginModule required
    username="admin"
    password="admin"
    user_admin="admin"
    user_kafka="kafka123";
};
Client {
  org.apache.zookeeper.server.auth.DigestLoginModule required
  username="admin"
  password="admin";
};

Logs

logs: CLICK ME

Additional Context

[dnwe]

Solved?

[hupeipei888]

Solved?

So far, it has not been resolved

[dnwe]

OK, I was wondering why you closed the GitHub issue then? 😄

Happy to take a look into this. From your output, the error code in the CreateACLs response is -1 which (as shown) is an Unknown Error. However, the CreateACLsResponse struct does additionally have an ErrMsg field that should contain more information and it doesn't appear that we expose that in the admin.go response at the moment

[hupeipei888]

tthis is the returned response for createAcls. The error should output some message in the kafka server, but there was nothing.

[hupeipei888]

I change kafka log level to debug, there is some exception

[github-actions[bot]]

Thank you for taking the time to raise this issue. However, it has not had any activity on it in the past 90 days and will be closed in 30 days if no updates occur. Please check if the main branch has already resolved the issue since it was raised. If you believe the issue is still valid and you would like input from the maintainers then please comment to ask for it to be reviewed.