Unable to start confluent-kafka when activating SASL_SSL : Error "Could not find a 'KafkaServer'"

1,821 views
Skip to first unread message

Denis GERMAIN

unread,
Jun 13, 2018, 7:59:59 AM6/13/18
to Confluent Platform
Hi,

I'm trying to setup OSS Confluent Platform on 3 Ubuntu 16.04 virtual machine

When I use PLAINTEXT only, the Kafka node registers properly on Zookeeper, but as soon as I add (or replace PLAINTEXT by) SASL_SSL, when I start Kafka I get 

grep listeners /etc/kafka/server.properties
listeners=PLAINTEXT://0:9091,SASL_SSL://0:9092

[2018-06-13 11:05:52,729] FATAL [KafkaServer id=3] Fatal error during KafkaServer startup. Prepare to shutdown (kafka.server.KafkaServer)
java.lang.IllegalArgumentException: Could not find a 'KafkaServer' or 'sasl_ssl.KafkaServer' entry in the JAAS configuration. System property 'java.security.auth.login.config' is /etc/kafka/kafka_server_jaas.conf

The error message is pretty explicit, but my problem is that the "KafkaServer" entry DOES exist in /etc/kafka/kafka_server_jaas.conf

# ll /etc/kafka/kafka_server_jaas.conf
-rw------- 1 cp-kafka confluent 365 Jun 13 11:47 /etc/kafka/kafka_server_jaas.conf

# cat /etc/kafka/kafka_server_jaas.conf
KafkaServer {
    org.apache.kafka.common.security.plain.PlainLoginModule required
    username="kafka"
    password="aaaaaa"
    user_kafka="aaaaaa";
};

Client {
   org.apache.kafka.common.security.plain.PlainLoginModule required
   username="kafka"
   password="aaaaaa";
};


I'm pretty sure it's a configuration issue but I can't pinpoint where. I've tried so many variations I can't really tell what I did or didn't try. What can I do to debug the issue ?

Thanks
Denis GERMAIN

Denis GERMAIN

unread,
Jul 4, 2018, 8:07:28 AM7/4/18
to Confluent Platform
FYI, the issue was fixed by switching to openjdk-8-jdk (instead of openjdk-9-jdk initially)

Don't know if it's an issue of Ubuntu 16.04, Confluent packaging on ubuntu 16.04, openjdk-9-jdk packaging, a little bit of all or something else entirely, but my cluster works now...

Regards,
Denis GERMAIN
Reply all
Reply to author
Forward
0 new messages