Kafka配置kerberos(CDH)

最新推荐文章于 2022-06-06 07:30:00 发布

原创

最新推荐文章于 2022-06-06 07:30:00 发布 · 3.2k 阅读

收录于

本文详细介绍了如何配置Kafka的SASL_KERBEROS认证，包括vijaas.conf和viclient.properties文件的设置，以及如何通过kinit命令解决因未配置keytab而导致的登录异常问题。

参考文档：https://www.jianshu.com/p/dd73b318e743

vi jaas.conf
KafkaClient{
com.sun.security.auth.module.Krb5LoginModule required
useTicketCache=true;
renewTicket=true;
};

vi client.properties
security.protocol=SASL_PLAINTEXT
sasl.kerberos.service.name=kafka

kinit test20

export KAFKA_OPTS="-Djava.security.auth.login.config=/opt/cloudera/parcels/CDH/lib/kafka/bin/jaas.conf"
启动producer前必须设置，否则报错
Caused by: java.lang.IllegalArgumentException: Could not find a 'KafkaClient' entry in the JAAS configuration.
System property 'java.security.auth.login.config' is not set

没有配置keytab,会出现如下错误 javax.security.auth.login.LoginException: Could not login: the client is being asked for a password,
but the Kafka client code does