murong00 opened a new issue #4564: Broker can't start when enable kerberos 
running with functions
URL: https://github.com/apache/pulsar/issues/4564
 
 
   **Describe the bug**
   If running functions with brokers and enable kerberos authentication, broker 
can't start due to the following auth error:
   ```
   10:46:41.367 [main] INFO  org.apache.pulsar.functions.worker.WorkerService - 
Created Pulsar client
   10:46:41.567 [pulsar-client-io-47-1] INFO  
org.apache.pulsar.client.impl.ConnectionPool - [[id: 0x790bd42c, 
L:/127.0.0.1:47850 - R:127.0.0.1/127.0.0.1:6650]] Connected to server
   10:46:41.580 [pulsar-io-24-1] INFO  
org.apache.pulsar.broker.service.ServerCnx - New connection from 
/127.0.0.1:47850
   10:46:41.586 [pulsar-client-io-47-1] INFO  
org.apache.pulsar.client.impl.auth.PulsarSaslClient - Using JAAS/SASL/GSSAPI 
auth to connect to server Principal broker/127.0.0.1,
   10:46:42.195 [pulsar-client-io-47-1] ERROR 
org.apache.pulsar.client.impl.auth.PulsarSaslClient - SASL error
   javax.security.sasl.SaslException: GSS initiate failed
        at 
com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:211)
 ~[?:1.8.0_112]
        at 
org.apache.pulsar.client.impl.auth.PulsarSaslClient$2.run(PulsarSaslClient.java:105)
 ~[org.apache.pulsar-pulsar-client-auth-sasl-2.4.0-SNAPSHOT.jar:2.4.0-SNAPSHOT]
        at 
org.apache.pulsar.client.impl.auth.PulsarSaslClient$2.run(PulsarSaslClient.java:102)
 ~[org.apache.pulsar-pulsar-client-auth-sasl-2.4.0-SNAPSHOT.jar:2.4.0-SNAPSHOT]
        at java.security.AccessController.doPrivileged(Native Method) 
~[?:1.8.0_112]
        at javax.security.auth.Subject.doAs(Subject.java:422) ~[?:1.8.0_112]
   ```
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to