ACL with option --topic * (wildcard for all topics) is not working
916 views
Skip to first unread message
Jon Guerin
unread,
Mar 13, 2016, 3:10:05 AM3/13/16
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Confluent Platform
Adding an acl with the --topic * (wildcard for all topics) is not working. I have to specify the exact name of all topics, and then it works.
gerard...@dizzit.com
unread,
Mar 14, 2016, 3:12:36 AM3/14/16
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Confluent Platform
In my experience, leaving out the topic does the job. At least with the hosts I had a similar problem. If it defaults to * it works, if I give * as topic value it failed to work as intended. I assume it is because of some escape character gets added somewhere. In my case I solved it by not setting the hosts at all when there where none given (we use a docker container to set the acl).
Jon Guerin
unread,
Mar 14, 2016, 1:21:43 PM3/14/16
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Confluent Platform
In the current version, the topic is a required option. Leaving it out gives the error message "You must provide at least one resource: --topic <topic> or --cluster or --group <group>"
Jon
gerard...@dizzit.com
unread,
Mar 15, 2016, 4:56:53 AM3/15/16
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Confluent Platform
If possible you can check what end up in zookeeper for the value, I assume you have to escape the * some way.
Jon Guerin
unread,
Mar 15, 2016, 1:16:29 PM3/15/16
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Confluent Platform
I'm running the following command . . .
bin/kafka-acls --authorizer-properties zookeeper.connect=localhost:2181 --add --operation All --allow-principal User:ANONYMOUS --topic *
It tells me it adds to the topic bin
Ronak Patel
unread,
Apr 12, 2017, 8:45:13 AM4/12/17
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message