[
https://issues.apache.org/jira/browse/KAFKA-8117?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Manikumar resolved KAFKA-8117.
------------------------------
Resolution: Duplicate
Fix Version/s: (was: 2.3.0)
> Flaky Test
> DelegationTokenEndToEndAuthorizationTest#testNoProduceWithDescribeAcl
> --------------------------------------------------------------------------------
>
> Key: KAFKA-8117
> URL: https://issues.apache.org/jira/browse/KAFKA-8117
> Project: Kafka
> Issue Type: Bug
> Components: core, unit tests
> Affects Versions: 2.3.0
> Reporter: Matthias J. Sax
> Priority: Critical
> Labels: flaky-test
>
> [https://builds.apache.org/blue/organizations/jenkins/kafka-trunk-jdk8/detail/kafka-trunk-jdk8/3470/tests]
> {quote}java.util.concurrent.ExecutionException:
> org.apache.kafka.common.errors.SaslAuthenticationException: Authentication
> failed during authentication due to invalid credentials with SASL mechanism
> SCRAM-SHA-256
> at
> org.apache.kafka.common.internals.KafkaFutureImpl.wrapAndThrow(KafkaFutureImpl.java:45)
> at
> org.apache.kafka.common.internals.KafkaFutureImpl.access$000(KafkaFutureImpl.java:32)
> at
> org.apache.kafka.common.internals.KafkaFutureImpl$SingleWaiter.await(KafkaFutureImpl.java:89)
> at
> org.apache.kafka.common.internals.KafkaFutureImpl.get(KafkaFutureImpl.java:260)
> at
> kafka.api.DelegationTokenEndToEndAuthorizationTest.createDelegationToken(DelegationTokenEndToEndAuthorizationTest.scala:88)
> at
> kafka.api.DelegationTokenEndToEndAuthorizationTest.configureSecurityAfterServersStart(DelegationTokenEndToEndAuthorizationTest.scala:63)
> at
> kafka.integration.KafkaServerTestHarness.setUp(KafkaServerTestHarness.scala:107)
> at kafka.api.IntegrationTestHarness.doSetup(IntegrationTestHarness.scala:81)
> at kafka.api.IntegrationTestHarness.setUp(IntegrationTestHarness.scala:73)
> at
> kafka.api.EndToEndAuthorizationTest.setUp(EndToEndAuthorizationTest.scala:183)
> at
> kafka.api.DelegationTokenEndToEndAuthorizationTest.setUp(DelegationTokenEndToEndAuthorizationTest.scala:74){quote}
> STDOUT
> {quote}Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Create from hosts: *
>
> [2019-03-16 03:39:08,540] WARN Unable to read additional data from client
> sessionid 0x1045892126e0013, likely client has closed socket
> (org.apache.zookeeper.server.NIOServerCnxn:376)
> [2019-03-16 03:39:08,634] ERROR [Consumer clientId=consumer-21,
> groupId=group] Topic authorization failed for topics [e2etopic]
> (org.apache.kafka.clients.Metadata:297)
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:PREFIXED:e2e`:
> User:scram-user has Allow permission for operations: Read from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
>
> Adding ACLs for resource `Group:PREFIXED:gr`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:PREFIXED:e2e`:
> User:scram-user has Allow permission for operations: Read from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
>
> Current ACLs for resource `Group:PREFIXED:gr`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Read from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:LITERAL:topic2`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:topic2`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:topic2`:
> User:scram-user has Allow permission for operations: Read from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:topic2`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-user has Allow permission for operations: Read from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
>
> Adding ACLs for resource `Group:LITERAL:*`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
> User:scram-user has Allow permission for operations: Read from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
> User:scram-user has Allow permission for operations: Write from hosts: *
>
> Current ACLs for resource `Group:LITERAL:*`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> [2019-03-16 03:39:36,082] WARN Unable to read additional data from client
> sessionid 0x104589279390008, likely client has closed socket
> (org.apache.zookeeper.server.NIOServerCnxn:376)
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Create from hosts: *
>
> [2019-03-16 03:39:45,276] ERROR [Consumer clientId=consumer-28,
> groupId=group] Topic authorization failed for topics [e2etopic]
> (org.apache.kafka.clients.Metadata:297)
> [2019-03-16 03:39:45,832] WARN Unable to read additional data from client
> sessionid 0x10458929fe3000a, likely client has closed socket
> (org.apache.zookeeper.server.NIOServerCnxn:376)
> [2019-03-16 03:39:46,138] WARN Unable to read additional data from client
> sessionid 0x10458929fe30008, likely client has closed socket
> (org.apache.zookeeper.server.NIOServerCnxn:376)
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> [2019-03-16 03:39:49,798] WARN Unable to read additional data from client
> sessionid 0x1045892ba700001, likely client has closed socket
> (org.apache.zookeeper.server.NIOServerCnxn:376)
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> [2019-03-16 03:39:55,125] ERROR [AdminClient clientId=adminclient-31]
> Connection to node -1 (localhost/127.0.0.1:42973) failed authentication due
> to: Authentication failed during authentication due to invalid credentials
> with SASL mechanism SCRAM-SHA-256 (org.apache.kafka.clients.NetworkClient:714)
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> Adding ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Read from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
>
> Adding ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:e2etopic`:
> User:scram-user has Allow permission for operations: Write from hosts: *
> User:scram-user has Allow permission for operations: Create from hosts: *
> User:scram-user has Allow permission for operations: Describe from hosts: *
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Group:LITERAL:group`:
> User:scram-user has Allow permission for operations: Read from hosts: *
>
> Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
> User:scram-admin has Allow permission for operations: ClusterAction from
> hosts: *
>
> Adding ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Current ACLs for resource `Topic:LITERAL:*`:
> User:scram-admin has Allow permission for operations: Read from hosts: *
>
> Completed Updating config for entity: user-principal 'scram-admin'.
> Completed Updating config for entity: user-principal 'scram-user'.
> [2019-03-16 03:40:04,766] ERROR [Producer clientId=producer-133] Topic
> authorization failed for topics [e2etopic]
> (org.apache.kafka.clients.Metadata:297){quote}
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
