如何解决Kafka Kerberos SASL 无法连接到代理
我正在为 Kafka 服务器使用 Kerberos GSSAPI SASL_PLAINTEXT 身份验证。当我尝试使用 Kafka 生产者时,出现此错误。 我无法理解此异常的含义。你能告诉我这个 EOF 异常的原因是什么吗?
Kerberos 能够获取票证并在调试日志中找到服务和客户端主体,但它仍然没有进行身份验证。我在 Java 8 中使用 Kafka 2.13-2.8.0
[2021-07-25 16:19:18,665] DEBUG [Producer clientId=console-producer] Initialize connection to node <<hostname>>:9094 (id: -1 rack: null) for sending metadata request (org.apache.kafka.clients.NetworkClient)
[2021-07-25 16:19:18,665] DEBUG [Producer clientId=console-producer] Initiating connection to node <<hostname>>:9094 (id: -1 rack: null) using address <<hostname>>/<<ip address>> (org.apache.kafka.clients.NetworkClient)
[2021-07-25 16:19:18,666] DEBUG [Producer clientId=console-producer] Set SASL client state to SEND_APIVERSIONS_REQUEST (org.apache.kafka.common.security.authenticator.SaslClientAuthenticator)
[2021-07-25 16:19:18,666] DEBUG [Producer clientId=console-producer] Creating SaslClient: client=admin@KAFKA.SECURE;service=kafka;serviceHostname=<<hostname>>;mechs=[GSSAPI] (org.apache.kafka.common.security.authenticator.SaslClientAuthenticator)
[2021-07-25 16:19:18,667] DEBUG [Producer clientId=console-producer] Created socket with SO_RCVBUF = 32768,SO_SNDBUF = 102400,SO_TIMEOUT = 0 to node -1 (org.apache.kafka.common.network.Selector)
[2021-07-25 16:19:18,667] DEBUG [Producer clientId=console-producer] Set SASL client state to RECEIVE_APIVERSIONS_RESPONSE (org.apache.kafka.common.security.authenticator.SaslClientAuthenticator)
[2021-07-25 16:19:18,667] DEBUG [Producer clientId=console-producer] Completed connection to node -1. Fetching API versions. (org.apache.kafka.clients.NetworkClient)
[2021-07-25 16:19:18,668] DEBUG [Producer clientId=console-producer] Set SASL client state to SEND_HANDSHAKE_REQUEST (org.apache.kafka.common.security.authenticator.SaslClientAuthenticator)
[2021-07-25 16:19:18,668] DEBUG [Producer clientId=console-producer] Set SASL client state to RECEIVE_HANDSHAKE_RESPONSE (org.apache.kafka.common.security.authenticator.SaslClientAuthenticator)
[2021-07-25 16:19:18,669] DEBUG [Producer clientId=console-producer] Set SASL client state to INITIAL (org.apache.kafka.common.security.authenticator.SaslClientAuthenticator)
[2021-07-25 16:19:18,671] DEBUG [Producer clientId=console-producer] Set SASL client state to INTERMEDIATE (org.apache.kafka.common.security.authenticator.SaslClientAuthenticator)
[2021-07-25 16:19:18,672] DEBUG [Producer clientId=console-producer] Connection with <<hostname>>/<<ip address>> disconnected (org.apache.kafka.common.network.Selector)
java.io.EOFException
at org.apache.kafka.common.network.NetworkReceive.readFrom(NetworkReceive.java:97)
at org.apache.kafka.common.security.authenticator.SaslClientAuthenticator.receiveResponseOrToken(SaslClientAuthenticator.java:475)
at org.apache.kafka.common.security.authenticator.SaslClientAuthenticator.receiveKafkaResponse(SaslClientAuthenticator.java:572)
at org.apache.kafka.common.security.authenticator.SaslClientAuthenticator.receiveToken(SaslClientAuthenticator.java:508)
at org.apache.kafka.common.security.authenticator.SaslClientAuthenticator.authenticate(SaslClientAuthenticator.java:302)
at org.apache.kafka.common.network.KafkaChannel.prepare(KafkaChannel.java:181)
at org.apache.kafka.common.network.Selector.pollSelectionKeys(Selector.java:543)
at org.apache.kafka.common.network.Selector.poll(Selector.java:481)
at org.apache.kafka.clients.NetworkClient.poll(NetworkClient.java:561)
at org.apache.kafka.clients.producer.internals.Sender.runOnce(Sender.java:327)
at org.apache.kafka.clients.producer.internals.Sender.run(Sender.java:242)
at java.lang.Thread.run(Thread.java:748)
[2021-07-25 16:19:18,565] DEBUG [Producer clientId=console-producer] Node -1 disconnected. (org.apache.kafka.clients.NetworkClient)
[2021-07-25 16:19:18,565] WARN [Producer clientId=console-producer] Connection to node -1 (<<hostname>>/<<ip address>>:9094) terminated during authentication. This may happen due to any of the following reasons: (1) Authentication failed due to invalid credentials with brokers older than 1.0.0,(2) Firewall blocking Kafka TLS traffic (eg it may only allow HTTPS traffic),(3) Transient network issue. (org.apache.kafka.clients.NetworkClient)
[2021-07-25 16:19:18,566] WARN [Producer clientId=console-producer] Bootstrap broker <<hostname>>:9094 (id: -1 rack: null) disconnected (org.apache.kafka.clients.NetworkClient)
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。