debezium / debezium/dbz

java.security.auth.login.config required even *_SASL_JAAS_CONFIG variables set [DBZ-1451]

Open
#239 0 comments 0 reactions 0 assignees View on GitHub
migrated-from-jira type/bug
Dominant language
HTML
Stars
6
Forks
8
Avg merge
2d 19h
Merged PRs (30d)
1

Description

Migrated from [DBZ-1451](https://issues.redhat.com/browse/DBZ-1451)

I got `java.lang.IllegalArgumentException: You must pass java.security.auth.login.config in secure mode.` exception in the debezium starting process even I have all *_SASL_JAAS_CONFIG variables set. Could you explain why this error appears? I use `debezium/connect:0.10` for that

{{Using plugin at /kafka/connect/debezium/
Complete classpath: :/kafka/connect/debezium/*
Using the following environment variables:
GROUP_ID=1
CONFIG_STORAGE_TOPIC=dev_connect_configs
OFFSET_STORAGE_TOPIC=dev_connect_offsets
BOOTSTRAP_SERVERS=myhost:9092
REST_HOST_NAME=10.11.1.73
REST_PORT=8083
ADVERTISED_HOST_NAME=10.11.1.73
ADVERTISED_PORT=9092
KEY_CONVERTER=org.apache.kafka.connect.json.JsonConverter
VALUE_CONVERTER=org.apache.kafka.connect.json.JsonConverter
INTERNAL_KEY_CONVERTER=org.apache.kafka.connect.json.JsonConverter
INTERNAL_VALUE_CONVERTER=org.apache.kafka.connect.json.JsonConverter
OFFSET_FLUSH_INTERVAL_MS=60000
OFFSET_FLUSH_TIMEOUT_MS=
SHUTDOWN_TIMEOUT=10000
--- Setting property from CONNECT_INTERNAL_VALUE_CONVERTER: internal.value.converter=org.apache.kafka.connect.json.JsonConverter
--- Setting property from CONNECT_CONSUMER_SASL_MECHANISM: consumer.sasl.mechanism=PLAIN
--- Setting property from CONNECT_VALUE_CONVERTER: value.converter=org.apache.kafka.connect.json.JsonConverter
--- Setting property from CONNECT_REST_ADVERTISED_HOST_NAME: rest.advertised.host.name=10.11.1.73
--- Setting property from CONNECT_OFFSET_FLUSH_INTERVAL_MS: offset.flush.interval.ms=60000
--- Setting property from CONNECT_SASL_JAAS_CONFIG: sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username="kafka" password="password";
--- Setting property from CONNECT_GROUP_ID: group.id=1
--- Setting property from CONNECT_BOOTSTRAP_SERVERS: bootstrap.servers=myhost:9092
--- Setting property from CONNECT_KEY_CONVERTER: key.converter=org.apache.kafka.connect.json.JsonConverter
--- Setting property from CONNECT_CONSUMER_SECURITY_PROTOCOL: consumer.security.protocol=SASL_SSL
--- Setting property from CONNECT_TASK_SHUTDOWN_GRACEFUL_TIMEOUT_MS: task.shutdown.graceful.timeout.ms=10000
--- Setting property from CONNECT_REST_HOST_NAME: rest.host.name=10.11.1.73
--- Setting property from CONNECT_SECURITY_PROTOCOL: security.protocol=SASL_SSL
--- Setting property from CONNECT_REST_PORT: rest.port=8083
--- Setting property from CONNECT_CONSUMER_SASL_JAAS_CONFIG: consumer.sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username="kafka" password="password";
--- Setting property from CONNECT_PRODUCER_SECURITY_PROTOCOL: producer.security.protocol=SASL_SSL
--- Setting property from CONNECT_OFFSET_FLUSH_TIMEOUT_MS: offset.flush.timeout.ms=5000
--- Setting property from CONNECT_SASL_MECHANISM: sasl.mechanism=PLAIN
--- Setting property from CONNECT_INTERNAL_KEY_CONVERTER: internal.key.converter=org.apache.kafka.connect.json.JsonConverter
--- Setting property from CONNECT_CONFIG_STORAGE_TOPIC: config.storage.topic=dev_connect_configs
--- Setting property from CONNECT_PRODUCER_SASL_JAAS_CONFIG: producer.sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username="kafka" password="password";
--- Setting property from CONNECT_REST_ADVERTISED_PORT: rest.advertised.port=9092
--- Setting property from CONNECT_OFFSET_STORAGE_TOPIC: offset.storage.topic=dev_connect_offsets
--- Setting property from CONNECT_PRODUCER_SASL_MECHANISM: producer.sasl.mechanism=PLAIN
--- Setting property from CONNECT_REQUEST_TIMEOUT_MS: request.timeout.ms=60000
2019-08-29 17:17:52,125 - INFO [main:AbstractConfig@165] - DistributedConfig values:
cluster = connect
metric.reporters = []
metadata.max.age.ms = 300000
reconnect.backoff.ms = 50
sasl.kerberos.ticket.renew.window.factor = 0.8
bootstrap.servers = [myhost:9092]
ssl.keystore.type = JKS
ssl.truststore.password = null
key.converter = class org.apache.kafka.connect.json.JsonConverter
client.id =
ssl.endpoint.identification.algorithm = null
request.timeout.ms = 60000
rest.advertised.host.name = 10.11.1.73
heartbeat.interval.ms = 3000
receive.buffer.bytes = 32768
ssl.truststore.type = JKS
rest.port = 8083
ssl.truststore.location = null
ssl.keystore.password = null
worker.unsync.backoff.ms = 300000
internal.value.converter = class org.apache.kafka.connect.json.JsonConverter
send.buffer.bytes = 131072
group.id = 1
task.shutdown.graceful.timeout.ms = 10000
rest.advertised.port = 9092
retry.backoff.ms = 100
sasl.kerberos.kinit.cmd = /usr/bin/kinit
sasl.kerberos.service.name = null
sasl.kerberos.ticket.renew.jitter = 0.05
ssl.trustmanager.algorithm = PKIX
ssl.key.password = null
sasl.kerberos.min.time.before.relogin = 60000
value.converter = class org.apache.kafka.connect.json.JsonConverter
connections.max.idle.ms = 540000
session.timeout.ms = 30000
metrics.num.samples = 2
worker.sync.timeout.ms = 3000
ssl.protocol = TLS
ssl.provider = null
ssl.enabled.protocols = [TLSv1.2, TLSv1.1, TLSv1]
rest.host.name = 10.11.1.73
ssl.keystore.location = null
offset.flush.timeout.ms = 5000
ssl.cipher.suites = null
offset.flush.interval.ms = 60000
security.protocol = SASL_SSL
internal.key.converter = class org.apache.kafka.connect.json.JsonConverter
ssl.keymanager.algorithm = SunX509
metrics.sample.window.ms = 30000

2019-08-29 17:17:52,296 - INFO [main:Log@186] - Logging initialized @516ms
Exception in thread "main" org.apache.kafka.common.KafkaException: Failed to construct kafka consumer
at org.apache.kafka.connect.runtime.distributed.WorkerGroupMember.(WorkerGroupMember.java:119)
at org.apache.kafka.connect.runtime.distributed.DistributedHerder.(DistributedHerder.java:135)
at org.apache.kafka.connect.runtime.distributed.DistributedHerder.(DistributedHerder.java:116)
at org.apache.kafka.connect.cli.ConnectDistributed.main(ConnectDistributed.java:60)
Caused by: org.apache.kafka.common.KafkaException: java.lang.IllegalArgumentException: You must pass java.security.auth.login.config in secure mode.
at org.apache.kafka.common.network.SaslChannelBuilder.configure(SaslChannelBuilder.java:74)
at org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:60)
at org.apache.kafka.clients.ClientUtils.createChannelBuilder(ClientUtils.java:79)
at org.apache.kafka.connect.runtime.distributed.WorkerGroupMember.(WorkerGroupMember.java:88)
... 3 more
Caused by: java.lang.IllegalArgumentException: You must pass java.security.auth.login.config in secure mode.
at org.apache.kafka.common.security.kerberos.Login.login(Login.java:289)
at org.apache.kafka.common.security.kerberos.Login.(Login.java:104)
at org.apache.kafka.common.security.kerberos.LoginManager.(LoginManager.java:44)
at org.apache.kafka.common.security.kerberos.LoginManager.acquireLoginManager(LoginManager.java:85)
at org.apache.kafka.common.network.SaslChannelBuilder.configure(SaslChannelBuilder.java:55)
... 6 more
}}

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.