Skip to content

Failing to connect to GSSAPI/SSL cluster #191

Open
@sappo

Description

@sappo

Hi,
I'm trying to connect to a GSSAPI cluster with SSL. Doing so results in the following error:

 Error Failed create new KafkaAdminClient (show more)

    org.apache.kafka.common.KafkaException thrown at org.apache.kafka.clients.admin.KafkaAdminClient::createInternal -> Failed create new KafkaAdminClient
    java.lang.IllegalArgumentException thrown at org.apache.kafka.common.security.JaasConfig::loginModuleControlFlag -> Login module control flag is not available in the JAAS config

I use the following jaas configuration:

KafkaClient {
  com.sun.security.auth.module.Krb5LoginModule required
  serviceName=kafka
  useKeyTab=true
  storeKey=true
  useTicketCache=false
  doNotPrompt=true
  client=true
  keyTab="[hidden]"
  principal="[hidden]";
};
Client {
  com.sun.security.auth.module.Krb5LoginModule required
  useKeyTab=true
  storeKey=true
  useTicketCache=false
  doNotPrompt=true
  client=true
  keyTab="[hidden]"
  principal="[hidden]";
};

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions