Kafka加Kerberos认证后，执行命令行报：Authentication failure

源神

于 2017-11-07 15:05:15 发布

阅读量1w

点赞数 1

分类专栏： Kafka

本文链接：https://blog.youkuaiyun.com/ZhouyuanLinli/article/details/78467705

版权

在配置了Kerberos认证的环境中，执行Kafka命令行工具如kafka-topics.sh时遇到了Authentication failure的错误。错误信息显示SASL认证失败，原因是找不到Kerberos数据库中的服务器。解决方法是修改kafka-topics.sh脚本，检查并启用KAFKA_CLIENT_KERBEROS_PARAMS，并使用kinit命令获取票据。更新脚本后，以kafka用户身份运行kinit和kafka-topics.sh命令可以成功执行。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

错误信息如下：

[kafka@c2bde02 bin]$ ./kafka-topics.sh --list --zookeeper 172.17.76.2:2181

[2017-11-07 14:25:46,940] ERROR An error: (java.security.PrivilegedActionException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - LOOKING_UP_SERVER)]) occurred when evaluating Zookeeper Quorum Member's received SASL token. Zookeeper Client will go to AUTH_FAILED state. (org.apache.zookeeper.client.ZooKeeperSaslClient)
[2017-11-07 14:25:46,941] ERROR SASL authentication with Zookeeper Quorum member failed: javax.security.sasl.SaslException: An error: (java.security.PrivilegedActionException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - LOOKING_UP_SERVER)]) occurred when evaluating Zookeeper Quorum Member's

最低0.47元/天解锁文章