1、kafka 3.4.0配置broker sasl_PLAINTEXT
,在执行
./kafka-metadata-quorum.sh --bootstrap-server 192.168.3.138:9092 --command-config kafka_server_config.conf describe --status
执行上面命令时,无内容输出,日志信息显示为:
[2023-05-30 16:21:36,542] INFO [SocketServer listenerType=BROKER, nodeId=2] Failed authentication with /192.168.3.138 (channelId=192.168.3.139:9092-192.168.3.138:36074-41) (Unexpected Kafka request of type METADATA during SASL handshake.) (org.apache.kafka.common.network.Selector)
2、kafka server主要配置信息
process.roles=broker,controller
node.id=1
controller.quorum.voters=1@192.168.3.138:9093,2@192.168.3.139:9093,3@192.168.3.140:9093
listeners=BROKER://:9092,CONTROLLER://:9093
inter.broker.listener.name=BROKER
controller.listener.names=CONTROLLER
listener.security.protocol.map=BROKER:SASL_PLAINTEXT,CONTROLLER:PLAINTEXT ### broker配置SASL_PLAINTEXT,controller设置为PLAINTEXT
sasl.mechanism.inter.broker.protocol=PLAIN
sasl.enabled.mechanisms=PLAIN
3、kafka_server_jaas.conf配置信息
broker.KafkaServer {
org.apache.kafka.common.security.plain.PlainLoginModule required
username="admin"
password="admin-secret"
user_admin="admin-secret"
user_alice="alice-secret";
};
4、kafka_server_config.conf配置信息
sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required \
username="admin" \
password="admin-secret";
security.protocol=SASL_PLAINTEXT
sasl.mechanism=PLAIN
5、查看创建的topic
[root@opensource01 kafka_2.13-3.4.0]# bin/kafka-topics.sh --describe --topic enmotech --bootstrap-server 192.168.3.138:9092 --command-config kafka_server_config.conf
Topic: enmotech TopicId: ZXVFSBuUT7e_xYWKk4rV9A PartitionCount: 5 ReplicationFactor: 3 Configs: segment.bytes=1073741824
Topic: enmotech Partition: 0 Leader: 3 Replicas: 3,1,2 Isr: 3,1,2
Topic: enmotech Partition: 1 Leader: 1 Replicas: 1,2,3 Isr: 3,1,2
Topic: enmotech Partition: 2 Leader: 2 Replicas: 2,3,1 Isr: 3,1,2
Topic: enmotech Partition: 3 Leader: 3 Replicas: 3,1,2 Isr: 3,1,2
Topic: enmotech Partition: 4 Leader: 1 Replicas: 1,2,3 Isr: 3,1,2
执行查看创建的topic命令时,指定kafka_server_config.conf配置文件,能够正常输出topic的信息,但是执行kafka-metadata-quorum.sh却出现Failed authentication 认证失败问题
PS: 如果不启动sasl_plaintext模式,执行kafka-metadata-quorum.sh命令时没有问题的,
[root@opensource02 bin]# ./kafka-metadata-quorum.sh --bootstrap-server 192.168.3.139:9092 describe --replication
NodeId LogEndOffset Lag LastFetchTimestamp LastCaughtUpTimestamp Status
1 96191 0 1685433493877 1685433493877 Leader
2 96191 0 1685433493482 1685433493482 Follower
3 96191 0 1685433493474 1685433493474 Follower
该问题为kafka的产品bug,参考链接:https://issues.apache.org/jira/browse/KAFKA-14711
你的答案