问题描述
我从logstash连接到kafka。使用gssapi auth将kafka设置为sasl_ssl。下面是logstash的配置。
bootstrap_servers => "broker:9093"
codec => json
topic_id => "topic"
jaas_path => "jaas.conf"
kerberos_config => "krb5.conf"
sasl_kerberos_service_name => "kafka"
sasl_mechanism => "GSSAPI"
security_protocol => "SASL_SSL"
ssl_endpoint_identification_algorithm => "https"
ssl_key_password => ""
ssl_keystore_location => "jks"
ssl_keystore_password => ""
ssl_keystore_type => "JKS"
ssl_truststore_location => "jks"
ssl_truststore_password => ""
ssl_truststore_type => "JKS"
让我知道是否错过任何参数。
当我运行logstash时，我从logstash收到“布尔型代理断开连接”错误。
从卡夫卡，我看到以下错误
[2020-08-21 23:04:46,160] INFO Successfully authenticated client: authenticationID=abc@REALM.COM;
org.apache.kafka.common.KafkaException: Failed to set name for 'domain@REALM' based on Kerberos authentication rules.
at org.apache.kafka.common.security.authenticator.DefaultKafkaPrincipalBuilder.applyKerberosShortNamer(DefaultKafkaPrincipalBuilder.java:142)
at org.apache.kafka.common.security.authenticator.DefaultKafkaPrincipalBuilder.build(DefaultKafkaPrincipalBuilder.java:128)
at org.apache.kafka.common.security.authenticator.SaslServerAuthenticator.principal(SaslServerAuthenticator.java:292)
at org.apache.kafka.common.network.KafkaChannel.principal(KafkaChannel.java:162)
at kafka.network.Processor.$anonfun$processCompletedReceives$1(SocketServer.scala:888)
at kafka.network.Processor.$anonfun$processCompletedReceives$1$adapted(SocketServer.scala:871)
at scala.collection.Iterator.foreach(Iterator.scala:941)
at scala.collection.Iterator.foreach$(Iterator.scala:941)
.......
Caused by: org.apache.kafka.common.security.kerberos.NoMatchingRule: No rules apply to domain@REALM,rules
at org.apache.kafka.common.security.kerberos.KerberosShortNamer.shortName(KerberosShortNamer.java:98)
任何潜在客户均表示赞赏。谢谢。
解决方法
暂无找到可以解决该程序问题的有效方法，小编努力寻找整理中！
如果你已经找到好的解决方法，欢迎将解决方案带上本链接一起发送给小编。
小编邮箱:dio#foxmail.com (将#修改为@）