Zookeeper /brokers/ids的Kafka Broker SASL -无授权异常- KeeperErrorCode无授权

axr492tv  于 2022-12-09  发布在  Apache
关注(0)|答案(2)|浏览(211)

在为Broker到Zookeper身份验证实现SASL_SSL GSSAPI机制时,我在Broker 2和3节点上遇到了以下异常
在SSL设置中,群集配置了SASL_SSL身份验证
代理1运行成功,但在代理2和3上,出现异常org.apache.zookeeper.KeeperException$NoAuthException:KeeperErrorCode = /brokers/ids的无身份验证
您能帮忙吗,什么可能的原因经纪人关闭与以下异常
例外情况:

ERROR Fatal error during KafkaServer startup. Prepare to shutdown (kafka.server.KafkaServer)
org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /brokers/ids
        at org.apache.zookeeper.KeeperException.create(KeeperException.java:120)
        at org.apache.zookeeper.KeeperException.create(KeeperException.java:54)
        at kafka.zookeeper.AsyncResponse.maybeThrow(ZooKeeperClient.scala:564)
        at kafka.zk.KafkaZkClient.createRecursive(KafkaZkClient.scala:1898)
        at kafka.zk.KafkaZkClient.makeSurePersistentPathExists(KafkaZkClient.scala:1796)
        at kafka.zk.KafkaZkClient.$anonfun$createTopLevelPaths$1(KafkaZkClient.scala:1788)
        at kafka.zk.KafkaZkClient.$anonfun$createTopLevelPaths$1$adapted(KafkaZkClient.scala:1788)
        at scala.collection.immutable.List.foreach(List.scala:333)
        at kafka.zk.KafkaZkClient.createTopLevelPaths(KafkaZkClient.scala:1788)
        at kafka.server.KafkaServer.initZkClient(KafkaServer.scala:793)
        at kafka.server.KafkaServer.startup(KafkaServer.scala:399)
        at kafka.server.KafkaServerStartable.startup(KafkaServerStartable.scala:44)
        at kafka.Kafka$.main(Kafka.scala:82)
        at kafka.Kafka.main(Kafka.scala)
pkln4tw6

pkln4tw61#

当你连接到你的zookeeper时,你会发现代理ID丢失了,并且得到一个与zookeeper使用的主机名的连接错误。你需要重新创建你的证书,并将主机名/IP添加到你的ext文件中。
对我有用。

vs91vp4v

vs91vp4v2#

我遇到了这个问题。我在Brokers和Zookeppers之间有SSL连接。所以,我所做的:
1.阻止所有经纪人和ZK

  1. Disable SSL connection in zookeeper.properties and server.properties.
    1.删除Zookeeper和代理日志。
    1.启动所有ZK比所有Broker
    1.在ZK和代理之间启用SSL连接
    1.重新启动ZK和代理
    如果你有关于主题的重要数据,你不能删除ZK和经纪人日志,但它对我的工作.

相关问题