Re: Kafka SASL (Kerberos) - UNKNOWN_TOPIC_OR_PARTITION

2018-08-21 Thread Manikumar
"allow.everyone.if.no.acl.found" config is applicable for Kafka's inbuilt authorizer implementation (SimpleAclAuthorizer). What is the Kafka version? You can check authorizer debug logs starting with "No acl found for resource..." make sure no acls for ANONYMOUS user. Are you using any custom

Re: Kafka SASL (Kerberos) - UNKNOWN_TOPIC_OR_PARTITION

2018-08-20 Thread Matt L
Thanks for the pointer Manikumar! It looks like it was my interbroker communication, this was set to SSL so inter broker users were coming in as ANONYMOUS. Once i changed this to SASL_SSL I was able to publish/consume. One remaining question i have is around allow.everyone.if.no.acl.found=true.

Re: Kafka SASL (Kerberos) - UNKNOWN_TOPIC_OR_PARTITION

2018-08-20 Thread Manikumar
is auto topic creation enabled on server? Any deny logs in kafka-authorizer.log? What is the inter-broker protocol configured? If it is SSL, SSL user should have ClusterAction permission. On Mon, Aug 20, 2018 at 3:33 PM Matt L wrote: > Hello, > > Having trouble when publishing and consuming

Kafka SASL (Kerberos) - UNKNOWN_TOPIC_OR_PARTITION

2018-08-20 Thread Matt L
Hello, Having trouble when publishing and consuming from a topic with SASL_PLAINTEXT. Both ZK and Kafka start successfully, in logs I see SASL_PLAINTEXT on 9093 as being available. kafka.log:[2018-08-20 03:31:08,202] INFO Registered broker 1 at path /brokers/ids/1 with addresses: