No valid credentials provided (Mechanism level: Fail to create credential. (63) - No service creds)]

1,872 views
Skip to first unread message

Bunty Ray

unread,
Sep 9, 2018, 11:44:59 PM9/9/18
to Confluent Platform
[2018-09-10 01:40:36,866] WARN The package io.confluent.support.metrics.collectors.FullCollector for collecting the full set of support metrics could not be loaded, so we are reverting to anonymous, basic metric collection. If you are a Confluent customer, please refer to the Confluent Platform documentation, section Proactive Support, on how to activate full metrics collection. (io.confluent.support.metrics.SupportConfig)
[2018-09-10 01:40:36,885] WARN Please note that the support metrics collection feature ("Metrics") of Proactive Support is enabled.  With Metrics enabled, this broker is configured to collect and report certain broker and cluster metadata ("Metadata") about your use of the Confluent Platform (including without limitation, your remote internet protocol address) to Confluent, Inc. ("Confluent") or its parent, subsidiaries, affiliates or service providers every 24hours.  This Metadata may be transferred to any country in which Confluent maintains facilities.  For a more in depth discussion of how Confluent processes such information, please read our Privacy Policy located at http://www.confluent.io/privacy. By proceeding with `confluent.support.metrics.enable=true`, you agree to all such collection, transfer, storage and use of Metadata by Confluent.  You can turn the Metrics feature off by setting `confluent.support.metrics.enable=false` in the broker configuration and restarting the broker.  See the Confluent Platform documentation for further information. (io.confluent.support.metrics.SupportedServerStartable)
[2018-09-10 01:40:36,885] INFO starting (kafka.server.KafkaServer)
[2018-09-10 01:40:36,887] INFO Connecting to zookeeper on <host-name>.<domain-name>.COM:2181/kafka (kafka.server.KafkaServer)
[2018-09-10 01:40:36,900] INFO JAAS File name: /opt/kafka/confluent-3.3.0/bin/kafka_server_jaas.conf (org.I0Itec.zkclient.ZkClient)
[2018-09-10 01:40:36,901] INFO Starting ZkClient event thread. (org.I0Itec.zkclient.ZkEventThread)
[2018-09-10 01:40:36,906] INFO Client environment:zookeeper.version=3.4.10-39d3a4f269333c922ed3db283be479f9deacaa0f, built on 03/23/2017 10:13 GMT (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,906] INFO Client environment:host.name=localhost (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,906] INFO Client environment:java.version=1.8.0_111 (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,906] INFO Client environment:java.vendor=Oracle Corporation (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,906] INFO Client environment:java.home=/opt/wagapp/jdk1.8.0_111/jre (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,906] INFO Client environment:java.class.path=:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/commons-digester-1.8.1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jetty-util-9.2.15.v20160210.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka_2.11-0.11.0.0-cp1-sources.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/plexus-utils-3.0.24.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jackson-core-2.8.5.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jersey-media-jaxb-2.24.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jackson-module-jaxb-annotations-2.8.5.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/connect-transforms-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/support-metrics-common-3.3.0.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jetty-io-9.2.15.v20160210.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/validation-api-1.1.0.Final.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka_2.11-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jackson-databind-2.8.5.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jersey-guava-2.24.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/javax.ws.rs-api-2.0.1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/javax.annotation-api-1.2.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jackson-annotations-2.8.5.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/hk2-api-2.5.0-b05.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/scala-library-2.11.11.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jetty-servlet-9.2.15.v20160210.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jersey-client-2.24.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/javax.servlet-api-3.1.0.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/osgi-resource-locator-1.0.1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka_2.11-0.11.0.0-cp1-javadoc.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka-tools-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka-streams-examples-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka-clients-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/support-metrics-client-3.3.0.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/commons-validator-1.4.1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka_2.11-0.11.0.0-cp1-scaladoc.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jersey-container-servlet-core-2.24.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/slf4j-api-1.7.25.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/commons-compress-1.8.1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/javassist-3.21.0-GA.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/httpclient-4.5.2.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jopt-simple-5.0.3.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/commons-collections-3.2.1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/commons-lang3-3.1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka_2.11-0.11.0.0-cp1-test-sources.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/connect-json-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/connect-runtime-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/hk2-utils-2.5.0-b05.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/maven-artifact-3.5.0.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/argparse4j-0.7.0.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/commons-beanutils-1.8.3.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jersey-container-servlet-2.24.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/paranamer-2.7.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/connect-file-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/httpcore-4.4.4.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jackson-mapper-asl-1.9.13.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jackson-jaxrs-json-provider-2.8.5.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/javax.inject-1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jersey-server-2.24.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/slf4j-log4j12-1.7.25.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jetty-continuation-9.2.15.v20160210.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jersey-common-2.24.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/avro-1.8.2.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/javax.inject-2.5.0-b05.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/xz-1.5.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/lz4-1.3.0.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/httpmime-4.5.2.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/zookeeper-3.4.10.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jetty-server-9.2.15.v20160210.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jackson-core-asl-1.9.13.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/rocksdbjni-5.0.1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/metrics-core-2.2.0.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/guava-20.0.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/aopalliance-repackaged-2.5.0-b05.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/reflections-0.9.11.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jetty-http-9.2.15.v20160210.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka_2.11-0.11.0.0-cp1-test.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jackson-jaxrs-base-2.8.5.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jetty-security-9.2.15.v20160210.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/commons-lang3-3.5.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/connect-api-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/snappy-java-1.1.2.6.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/commons-logging-1.2.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka-log4j-appender-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/hk2-locator-2.5.0-b05.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/scala-parser-combinators_2.11-1.0.4.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/jetty-servlets-9.2.15.v20160210.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/log4j-1.2.17.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/kafka-streams-0.11.0.0-cp1.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/commons-codec-1.9.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/kafka/zkclient-0.10.jar:/opt/kafka/confluent-3.3.0/bin/../share/java/confluent-support-metrics/*:/usr/share/java/confluent-support-metrics/* (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,907] INFO Client environment:java.library.path=/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,907] INFO Client environment:java.io.tmpdir=/tmp (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,907] INFO Client environment:java.compiler=<NA> (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,907] INFO Client environment:os.name=Linux (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,907] INFO Client environment:os.arch=amd64 (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,907] INFO Client environment:os.version=3.10.0-327.36.3.el7.x86_64 (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,907] INFO Client environment:user.name=root (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,907] INFO Client environment:user.home=/root (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,907] INFO Client environment:user.dir=/opt/kafka/confluent-3.3.0/logs (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:36,908] INFO Initiating client connection, connectString=<host-name>.<domain-name>.COM:2181 sessionTimeout=6000 watcher=org.I0Itec.zkclient.ZkClient@59309333 (org.apache.zookeeper.ZooKeeper)
[2018-09-10 01:40:37,118] INFO Waiting for keeper state SaslAuthenticated (org.I0Itec.zkclient.ZkClient)
>>> KeyTabInputStream, readName(): DEVPOC.<domain-name>.COM
>>> KeyTabInputStream, readName(): root
>>> KeyTabInputStream, readName(): <host-name>.<domain-name>.COM
>>> KeyTab: load() entry length: 110; type: 18
>>> KeyTabInputStream, readName(): DEVPOC.<domain-name>.COM
>>> KeyTabInputStream, readName(): root
>>> KeyTabInputStream, readName(): <host-name>.<domain-name>.COM
>>> KeyTab: load() entry length: 94; type: 17
Looking for keys for: root/<host-name>.<domain-name>.COM@DEVPOC.<domain-name>.COM
Java config name: /etc/krb5.conf
Loaded from Java config
Added key: 17version: 2
Found unsupported keytype (18) for root/<host-name>.<domain-name>.COM@DEVPOC.<domain-name>.COM
>>> KdcAccessibility: reset
Looking for keys for: root/<host-name>.<domain-name>.COM@DEVPOC.<domain-name>.COM
Added key: 17version: 2
Found unsupported keytype (18) for root/<host-name>.<domain-name>.COM@DEVPOC.<domain-name>.COM
Using builtin default etypes for default_tkt_enctypes
default etypes for default_tkt_enctypes: 17 16 23.
>>> KrbAsReq creating message
>>> KrbKdcReq send: kdc=<host-name>.<domain-name>.COM TCP:88, timeout=30000, number of retries =3, #bytes=182
>>> KDCCommunication: kdc=<host-name>.<domain-name>.COM TCP:88, timeout=30000,Attempt =1, #bytes=182
>>>DEBUG: TCPClient reading 773 bytes
>>> KrbKdcReq send: #bytes read=773
>>> KdcAccessibility: remove <host-name>.<domain-name>.COM
Looking for keys for: root/<host-name>.<domain-name>.COM@DEVPOC.<domain-name>.COM
Added key: 17version: 2
Found unsupported keytype (18) for root/<host-name>.<domain-name>.COM@DEVPOC.<domain-name>.COM
>>> EType: sun.security.krb5.internal.crypto.Aes128CtsHmacSha1EType
>>> KrbAsRep cons in KrbAsReq.getReply root/<host-name>.<domain-name>.COM
[2018-09-10 01:40:37,350] INFO Client successfully logged in. (org.apache.zookeeper.Login)
[2018-09-10 01:40:37,352] INFO TGT refresh thread started. (org.apache.zookeeper.Login)
[2018-09-10 01:40:37,355] INFO TGT valid starting at:        Mon Sep 10 01:40:37 UTC 2018 (org.apache.zookeeper.Login)
[2018-09-10 01:40:37,355] INFO TGT expires:                  Tue Sep 11 01:40:37 UTC 2018 (org.apache.zookeeper.Login)
[2018-09-10 01:40:37,355] INFO TGT refresh sleeping until: Mon Sep 10 20:55:55 UTC 2018 (org.apache.zookeeper.Login)
[2018-09-10 01:40:37,356] INFO Client will use GSSAPI as SASL mechanism. (org.apache.zookeeper.client.ZooKeeperSaslClient)
[2018-09-10 01:40:37,362] INFO Opening socket connection to server <domain-name>.com/10.X.9.XXX:2181. Will attempt to SASL-authenticate using Login Context section 'Client' (org.apache.zookeeper.ClientCnxn)
[2018-09-10 01:40:37,369] INFO Socket connection established to <domain-name>.com/10.X.9.XXX:2181, initiating session (org.apache.zookeeper.ClientCnxn)
[2018-09-10 01:40:37,485] INFO Session establishment complete on server <domain-name>.com/10.X.9.XXX:2181, sessionid = 0x165bf7313640006, negotiated timeout = 6000 (org.apache.zookeeper.ClientCnxn)
[2018-09-10 01:40:37,486] INFO zookeeper state changed (SyncConnected) (org.I0Itec.zkclient.ZkClient)
Found ticket for root/<host-name>.<domain-name>.COM@DEVPOC.<domain-name>.COM to go to krbtgt/DEVPOC.<domain-name>.COM@DEVPOC.<domain-name>.COM expiring on Tue Sep 11 01:40:37 UTC 2018
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for root/<host-name>.<domain-name>.COM@DEVPOC.<domain-name>.COM to go to krbtgt/DEVPOC.<domain-name>.COM@DEVPOC.<domain-name>.COM expiring on Tue Sep 11 01:40:37 UTC 2018
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: main loop: [0] tempService=krbtgt/<domain-name>.COM@DEVPOC.<domain-name>.COM
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 17 16 23.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Aes128CtsHmacSha1EType
>>> KrbKdcReq send: kdc=<host-name>.<domain-name>.COM TCP:88, timeout=30000, number of retries =3, #bytes=736
>>> KDCCommunication: kdc=<host-name>.<domain-name>.COM TCP:88, timeout=30000,Attempt =1, #bytes=736
>>>DEBUG: TCPClient reading 218 bytes
>>> KrbKdcReq send: #bytes read=218
>>> KdcAccessibility: remove <host-name>.<domain-name>.COM
>>> KDCRep: init() encoding tag is 126 req type is 13
>>>KRBError:
cTime is Wed Nov 10 12:50:42 UTC 1971 58625442000
sTime is Mon Sep 10 01:40:37 UTC 2018 1536543637000
suSec is 197782
error code is 7
error Message is Server not found in Kerberos database
cname is root/<host-name>.<domain-name>.COM@DEVPOC.<domain-name>.COM
sname is krbtgt/<domain-name>.COM@DEVPOC.<domain-name>.COM
msgType is 30
>>> Credentials acquireServiceCreds: no tgt; searching thru capath
>>> Credentials acquireServiceCreds: no tgt; cannot get creds
KrbException: Fail to create credential. (63) - No service creds
at sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:156)
at sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:458)
at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:693)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:192)
at org.apache.zookeeper.client.ZooKeeperSaslClient$1.run(ZooKeeperSaslClient.java:290)
at org.apache.zookeeper.client.ZooKeeperSaslClient$1.run(ZooKeeperSaslClient.java:287)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:422)
at org.apache.zookeeper.client.ZooKeeperSaslClient.createSaslToken(ZooKeeperSaslClient.java:286)
at org.apache.zookeeper.client.ZooKeeperSaslClient.createSaslToken(ZooKeeperSaslClient.java:272)
at org.apache.zookeeper.client.ZooKeeperSaslClient.sendSaslPacket(ZooKeeperSaslClient.java:344)
at org.apache.zookeeper.client.ZooKeeperSaslClient.initialize(ZooKeeperSaslClient.java:382)
at org.apache.zookeeper.ClientCnxn$SendThread.run(ClientCnxn.java:1070)
[2018-09-10 01:40:37,499] ERROR An error: (java.security.PrivilegedActionException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Fail to create credential. (63) - No service creds)]) occurred when evaluating Zookeeper Quorum Member's  received SASL token. Zookeeper Client will go to AUTH_FAILED state. (org.apache.zookeeper.client.ZooKeeperSaslClient)
[2018-09-10 01:40:37,499] ERROR SASL authentication with Zookeeper Quorum member failed: javax.security.sasl.SaslException: An error: (java.security.PrivilegedActionException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Fail to create credential. (63) - No service creds)]) occurred when evaluating Zookeeper Quorum Member's  received SASL token. Zookeeper Client will go to AUTH_FAILED state. (org.apache.zookeeper.ClientCnxn)
[2018-09-10 01:40:37,499] INFO zookeeper state changed (AuthFailed) (org.I0Itec.zkclient.ZkClient)
[2018-09-10 01:40:37,500] INFO Terminate ZkClient event thread. (org.I0Itec.zkclient.ZkEventThread)
[2018-09-10 01:40:37,501] FATAL Fatal error during KafkaServer startup. Prepare to shutdown (kafka.server.KafkaServer)
org.I0Itec.zkclient.exception.ZkAuthFailedException: Authentication failure
at org.I0Itec.zkclient.ZkClient.waitForKeeperState(ZkClient.java:947)
at org.I0Itec.zkclient.ZkClient.waitUntilConnected(ZkClient.java:924)
at org.I0Itec.zkclient.ZkClient.connect(ZkClient.java:1231)
at org.I0Itec.zkclient.ZkClient.<init>(ZkClient.java:157)
at org.I0Itec.zkclient.ZkClient.<init>(ZkClient.java:131)
at kafka.utils.ZkUtils$.createZkClientAndConnection(ZkUtils.scala:103)
at kafka.utils.ZkUtils$.apply(ZkUtils.scala:85)
at kafka.server.KafkaServer$$anonfun$initZk$2.apply(KafkaServer.scala:329)
at kafka.server.KafkaServer$$anonfun$initZk$2.apply(KafkaServer.scala:327)
at scala.Option.foreach(Option.scala:257)
at kafka.server.KafkaServer.initZk(KafkaServer.scala:327)
at kafka.server.KafkaServer.startup(KafkaServer.scala:191)
at io.confluent.support.metrics.SupportedServerStartable.startup(SupportedServerStartable.java:102)
at io.confluent.support.metrics.SupportedKafka.main(SupportedKafka.java:49)
[2018-09-10 01:40:37,504] INFO shutting down (kafka.server.KafkaServer)
[2018-09-10 01:40:37,507] INFO shut down completed (kafka.server.KafkaServer)
[2018-09-10 01:40:37,508] INFO shutting down (kafka.server.KafkaServer)

Amit Sahu

unread,
Sep 11, 2018, 7:47:51 AM9/11/18
to confluent...@googlegroups.com
Whenever i faced this kind of exception, i simply login again with "kinit". Does the job for me.. 

--
You received this message because you are subscribed to the Google Groups "Confluent Platform" group.
To unsubscribe from this group and stop receiving emails from it, send an email to confluent-platform+unsub...@googlegroups.com.
To post to this group, send email to confluent-platform@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/confluent-platform/d78c8a5a-81bf-46be-b256-1c6e9611da8d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Bunty Ray

unread,
Sep 12, 2018, 1:17:33 AM9/12/18
to Confluent Platform
Hi Amit,

My Zookeeper process runs with 'zookeeper' user and Kafka Broker process  run as 'kafka' user and each of them have separate keytab files.I basically execute the below command before starting Broker

" kinit -k -t /opt/kafka/confluent-3.3.0/bin/security/zookeeper.service.keytab zookeeper/<hostname>.xxx...@DEVPOC.XXX.COM"

So in Brokers shell it gives

 klist
Ticket cache: FILE:/tmp/krb5cc_57618
Default principal: zookeeper/<hostname>.xxx...@DEVPOC.XXX.COM

Valid starting       Expires              Service principal
09/12/2018 00:00:00  09/13/2018 00:00:00  krbtgt/DEVPOC....@DEVPOC.XXX.COM
To post to this group, send email to confluent...@googlegroups.com.

Amit Sahu

unread,
Sep 12, 2018, 1:41:50 AM9/12/18
to confluent...@googlegroups.com
Hi Bunty,
if possible, can you share your script to start your zookeeper and server.
Technically you need initialize the jaas files for both zk/bk in yur start scripts. These jaas files should contain keytabs for the servers.

Regards,
Amit

To unsubscribe from this group and stop receiving emails from it, send an email to confluent-platf...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Confluent Platform" group.
To unsubscribe from this group and stop receiving emails from it, send an email to confluent-platf...@googlegroups.com.

To post to this group, send email to confluent...@googlegroups.com.

Amit Sahu

unread,
Sep 12, 2018, 1:44:05 AM9/12/18
to confluent...@googlegroups.com

Min Tan

unread,
Sep 12, 2018, 1:50:10 AM9/12/18
to confluent...@googlegroups.com
Hi,

I run the confluent-platform enterprise trial on a mac.

I notice that the control centre or connect server sometime goes down randomly.

Does the confluent-platform enterprise needs an internet connection to stay alive?

Regards,

Min Tan

Amit Sahu

unread,
Sep 12, 2018, 1:57:44 AM9/12/18
to confluent...@googlegroups.com
Nope. You can stop confluent support metrics reporting in server.properties.

Regards,
Amit

--
You received this message because you are subscribed to the Google Groups "Confluent Platform" group.
To unsubscribe from this group and stop receiving emails from it, send an email to confluent-platf...@googlegroups.com.
To post to this group, send email to confluent...@googlegroups.com.

Min Tan

unread,
Sep 12, 2018, 2:01:15 AM9/12/18
to confluent...@googlegroups.com

Bunty Ray

unread,
Sep 12, 2018, 2:25:15 AM9/12/18
to Confluent Platform
Attached Zookeeper and Broker script

Here is the list of command I use to create principle and keytab

Zookeeper
kadmin -p kdcadmin/ad...@DEVPOC.XXX.COM   -q "add_principal -randkey zookeeper/<host-name>.xxx...@DEVPOC.XXX.COM"
kadmin -p kdcadmin/ad...@DEVPOC.XXX.COM   -q "xst -kt /tmp/zookeeper.service.keytab zookeeper/<host-name>.xxx...@DEVPOC.XXX.COM"

Broker
kadmin -p kdcadmin/ad...@DEVPOC.XXX.COM   -q "add_principal -randkey kafka/<host-name>.xxx...@DEVPOC.XXX.COM"
kadmin -p kdcadmin/ad...@DEVPOC.XXX.COM   -q "xst -kt /tmp/kafka.service.keytab kafka/<host-name>.xxx...@DEVPOC.XXX.COM"

I copy the keytab to indivdual directory and then create the JAAS conf file
To unsubscribe from this group and stop receiving emails from it, send an email to confluent-platform+unsub...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Confluent Platform" group.
To unsubscribe from this group and stop receiving emails from it, send an email to confluent-platform+unsub...@googlegroups.com.
rx-kb-startup.sh
rx-zk-startup.sh
kafka_server_jaas.conf
kafka-server-start
zookeeper_jaas.conf
zookeeper-server-start
Reply all
Reply to author
Forward
0 new messages