[ 
https://issues.apache.org/jira/browse/KAFKA-9181?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17096800#comment-17096800
 ] 

Hai Lin commented on KAFKA-9181:
--------------------------------

I did notice some issue after this patch, here is what I observe.

Consumer metadata might skip first metadata update, cause grouopSubscription is 
not reset. In my case, the consumer coordinator thread hijack the update by 
calling newMetadataRequestAndVersion with outdated groupSubscription before 
joinPrepare() happen. The groupSubscription will get reset later and it will 
eventually get update later, and this won't be an issue for initial consumer 
subscribe(since the groupSubscription is empty anyway), but it might happen the 
following subscribe when groupSubscription is not empty. This will create a 
discrepancy between subscription and groupSubscription, if any new metadata 
request happened in between, metadataTopics will return outdated group 
information. 

 
h4. The happy path
 * Consumer call subscribe -> Update {{needUpdated}}, bump up 
{{requestVersion}} and update {{subscription}} in {{SubscriptionState}} -> 
{{prepareJoin()}} was call in first {{poll()}} to reset {{groupSubscription}} 
-> next time when metadata update was call and {{metadataTopics()}} returns 
{{subscription}} since {{groupSubscription}} is empty -> update call issue to 
broker to fetch partition information for new topic

h4. In our case
 * Consumer call subscribe -> Update {{needUpdated}}, bump up 
{{requestVersion}} and update {{subscription}}(not {{groupSubscription}}) in 
{{SubscriptionState}} -> Consumer Coordinator heartbeat thread call metadata 
request and {{SubscriptionState}} gave away the current requestVersion and 
outdated {{groupSubscription}} -> making request for metadata update with 
outdated subscription -> request comes back to client and since 
{{requestVersion}} is up to latest, it reset {{needUpdated}} flag -> 
{{joinPrepare()}} called and reset {{groupSubscription}} -> no new metadata 
update request follow cause {{needUpdated}} was reset -> metadata request will 
happen when {{metadata.max.age}} reaches.

 

I saw some discussion in the pull request, don't know if I miss anything here.

> Flaky test 
> kafka.api.SaslGssapiSslEndToEndAuthorizationTest.testNoConsumeWithoutDescribeAclViaSubscribe
> -------------------------------------------------------------------------------------------------------
>
>                 Key: KAFKA-9181
>                 URL: https://issues.apache.org/jira/browse/KAFKA-9181
>             Project: Kafka
>          Issue Type: Test
>          Components: core
>            Reporter: Bill Bejeck
>            Assignee: Rajini Sivaram
>            Priority: Major
>              Labels: flaky-test, tests
>             Fix For: 2.5.0
>
>
> Failed in 
> [https://builds.apache.org/job/kafka-pr-jdk8-scala2.11/26571/testReport/junit/kafka.api/SaslGssapiSslEndToEndAuthorizationTest/testNoConsumeWithoutDescribeAclViaSubscribe/]
>  
> {noformat}
> Error Messageorg.apache.kafka.common.errors.TopicAuthorizationException: Not 
> authorized to access topics: 
> [topic2]Stacktraceorg.apache.kafka.common.errors.TopicAuthorizationException: 
> Not authorized to access topics: [topic2]
> Standard OutputAdding ACLs for resource 
> `ResourcePattern(resourceType=CLUSTER, name=kafka-cluster, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka6494439724844851846.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:43:16,187] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:43:16,191] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:43:16,384] ERROR [ReplicaFetcher replicaId=1, leaderId=2, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:43:16,384] ERROR [ReplicaFetcher replicaId=0, leaderId=2, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW) 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Read from hosts: *
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka3083328529571706878.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka3083328529571706878.tmp refreshKrb5Config is false principal is 
> clie...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is clie...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:43:17,549] ERROR [Consumer clientId=consumer-group-255, 
> groupId=group] Topic authorization failed for topics [e2etopic] 
> (org.apache.kafka.clients.Metadata:283)
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka2790389872392408045.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:43:43,513] ERROR [ReplicaFetcher replicaId=2, leaderId=1, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:43:43,513] ERROR [ReplicaFetcher replicaId=0, leaderId=1, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:43:43,682] ERROR [ReplicaFetcher replicaId=2, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:43:43,683] ERROR [ReplicaFetcher replicaId=0, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka3639280670011131711.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Create from hosts: * 
> [2019-11-13 04:43:45,193] ERROR [Consumer clientId=consumer-group-256, 
> groupId=group] Topic authorization failed for topics [e2etopic] 
> (org.apache.kafka.clients.Metadata:283)
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Create from hosts: *
>       User:client has Allow permission for operations: Write from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW) 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Read from hosts: *
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Create from hosts: *
>       User:client has Allow permission for operations: Write from hosts: * 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> [2019-11-13 04:43:45,698] ERROR [Consumer clientId=consumer-group-256, 
> groupId=group] Topic authorization failed for topics [topic2] 
> (org.apache.kafka.clients.Metadata:283)
> [2019-11-13 04:43:45,700] ERROR [Consumer clientId=consumer-group-256, 
> groupId=group] Topic authorization failed for topics [topic2] 
> (org.apache.kafka.clients.Metadata:283)
> [2019-11-13 04:43:47,205] ERROR [Consumer clientId=consumer-group-256, 
> groupId=group] Topic authorization failed for topics [topic2] 
> (org.apache.kafka.clients.Metadata:283)
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka2853735962705514989.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:44:10,330] ERROR [ReplicaFetcher replicaId=1, leaderId=2, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:44:10,331] ERROR [ReplicaFetcher replicaId=0, leaderId=2, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:44:10,531] ERROR [ReplicaFetcher replicaId=0, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:44:10,531] ERROR [ReplicaFetcher replicaId=2, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2e, 
> patternType=PREFIXED)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=gr, 
> patternType=PREFIXED)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:PREFIXED:e2e`: 
>       User:client has Allow permission for operations: Read from hosts: *
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Group:PREFIXED:gr`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka3614118284002283090.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka3343806238750489399.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:44:42,245] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:44:42,262] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:44:42,453] ERROR [ReplicaFetcher replicaId=1, leaderId=2, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:44:42,461] ERROR [ReplicaFetcher replicaId=0, leaderId=2, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW) 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Read from hosts: *
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka2293718255849931457.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka8247896269514574204.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:45:09,679] ERROR [ReplicaFetcher replicaId=0, leaderId=1, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:45:09,687] ERROR [ReplicaFetcher replicaId=2, leaderId=1, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:45:09,901] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:45:09,902] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka6165264118808778893.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka5588216719148826164.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:45:44,360] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:45:44,366] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:45:44,553] ERROR [ReplicaFetcher replicaId=0, leaderId=2, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:45:44,553] ERROR [ReplicaFetcher replicaId=1, leaderId=2, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=topic2, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:topic2`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=topic2, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW) 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:topic2`: 
>       User:client has Allow permission for operations: Read from hosts: *
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka8937168000923149954.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:45:45,239] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition topic2-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:45:45,239] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition topic2-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka1753713975062534365.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:46:13,255] ERROR [ReplicaFetcher replicaId=0, leaderId=2, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:46:13,261] ERROR [ReplicaFetcher replicaId=1, leaderId=2, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:46:13,522] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:46:13,527] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Read from hosts: *
>       User:kafka has Allow permission for operations: Read from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Group:LITERAL:*`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka4579277064687399324.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka1211513173897695002.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:46:38,320] ERROR [ReplicaFetcher replicaId=0, leaderId=2, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:46:38,323] ERROR [ReplicaFetcher replicaId=1, leaderId=2, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:46:38,521] ERROR [ReplicaFetcher replicaId=2, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:46:38,526] ERROR [ReplicaFetcher replicaId=0, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka4859545116775501587.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka5936495479832727441.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:47:13,934] ERROR [ReplicaFetcher replicaId=0, leaderId=1, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:47:13,939] ERROR [ReplicaFetcher replicaId=2, leaderId=1, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:47:14,142] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:47:14,143] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka5030780877268645002.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Create from hosts: * 
> [2019-11-13 04:47:15,675] ERROR [Consumer clientId=consumer-group-263, 
> groupId=group] Topic authorization failed for topics [e2etopic] 
> (org.apache.kafka.clients.Metadata:283)
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka2819838905642285118.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:47:43,623] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:47:43,635] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:47:43,831] ERROR [ReplicaFetcher replicaId=2, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:47:43,831] ERROR [ReplicaFetcher replicaId=0, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka7821381619195888442.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka7294747755465828555.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:48:13,692] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:48:13,705] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:48:13,880] ERROR [ReplicaFetcher replicaId=1, leaderId=2, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:48:13,884] ERROR [ReplicaFetcher replicaId=0, leaderId=2, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka2522835534939702730.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka8641154754165823659.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:48:39,064] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:48:39,074] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:48:39,267] ERROR [ReplicaFetcher replicaId=2, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:48:39,268] ERROR [ReplicaFetcher replicaId=0, leaderId=1, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka4420357362687484380.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:48:39,713] ERROR [Producer clientId=producer-422] Topic 
> authorization failed for topics [e2etopic] 
> (org.apache.kafka.clients.Metadata:283)
> [2019-11-13 04:48:39,740] ERROR [Consumer clientId=consumer-group-265, 
> groupId=group] Topic authorization failed for topics [e2etopic] 
> (org.apache.kafka.clients.Metadata:283)
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=topic2, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:topic2`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=topic2, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW) 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:topic2`: 
>       User:client has Allow permission for operations: Read from hosts: *
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> [2019-11-13 04:48:40,327] ERROR [Producer clientId=producer-422] Topic 
> authorization failed for topics [e2etopic] 
> (org.apache.kafka.clients.Metadata:283)
> [2019-11-13 04:48:40,429] ERROR [Producer clientId=producer-422] Topic 
> authorization failed for topics [e2etopic] 
> (org.apache.kafka.clients.Metadata:283)
> [2019-11-13 04:48:41,185] ERROR [Consumer clientId=consumer-group-265, 
> groupId=group] Topic authorization failed for topics [e2etopic] 
> (org.apache.kafka.clients.Metadata:283)
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW) 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Read from hosts: *
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, 
> name=kafka-cluster, patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=CLUSTER_ACTION, 
> permissionType=ALLOW) 
> Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: 
>       User:kafka has Allow permission for operations: ClusterAction from 
> hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, 
> patternType=LITERAL)`: 
>       (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:*`: 
>       User:kafka has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka8725022246516193653.tmp refreshKrb5Config is false principal is 
> kafka/localh...@example.com tryFirstPass is false useFirstPass is false 
> storePass is false clearPass is false
> principal is kafka/localh...@example.com
> Will use keytab
> Commit Succeeded 
> [2019-11-13 04:49:10,578] ERROR [ReplicaFetcher replicaId=0, leaderId=2, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:49:10,578] ERROR [ReplicaFetcher replicaId=1, leaderId=2, 
> fetcherId=0] Error for partition __consumer_offsets-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:49:10,775] ERROR [ReplicaFetcher replicaId=1, leaderId=0, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> [2019-11-13 04:49:10,780] ERROR [ReplicaFetcher replicaId=2, leaderId=0, 
> fetcherId=0] Error for partition e2etopic-0 at offset 0 
> (kafka.server.ReplicaFetcherThread:76)
> org.apache.kafka.common.errors.UnknownTopicOrPartitionException: This server 
> does not host this topic-partition.
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW)
>       (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW)
>       (principal=User:client, host=*, operation=DESCRIBE, 
> permissionType=ALLOW) 
> Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, 
> patternType=LITERAL)`: 
>       (principal=User:client, host=*, operation=READ, permissionType=ALLOW) 
> Current ACLs for resource `Topic:LITERAL:e2etopic`: 
>       User:client has Allow permission for operations: Read from hosts: *
>       User:client has Allow permission for operations: Describe from hosts: *
>       User:client has Allow permission for operations: Write from hosts: *
>       User:client has Allow permission for operations: Create from hosts: * 
> Current ACLs for resource `Group:LITERAL:group`: 
>       User:client has Allow permission for operations: Read from hosts: * 
> Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
> false ticketCache is null isInitiator true KeyTab is 
> /tmp/kafka6140470407592077851.tmp refreshKrb5Config is false principal is 
> cli...@example.com tryFirstPass is false useFirstPass is false storePass is 
> false clearPass is false
> principal is cli...@example.com
> Will use keytab
> Commit Succeeded {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to