When creating multiple brokers at the same IP, corresponding to multiple hosts and multiple Kerberos principals, librdkafka can only auth one broker. #4937
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
version: v2.3.0; v2.6.1
broker: Configured with Kerberos authentication, three broker nodes are on the same device with the same IP but different hosts. The hosts are as follows: 172.18.0.1 kafka1 kafka2 kafka3. Separate Kerberos principals have been created based on these three hosts and have been applied to the brokers respectively.
producer: Since kafka1 is listed first in the hosts configuration, librdkafka only attempts to authenticate with the principal: xxx/kafka1@XXX.COM, which results in messages being sent only to the partitions corresponding to kafka1 (I am very sure about this).
The performance of kafka-console-producer.sh is correct; it can authenticate with all brokers and send to any partition. Do I need some configuration? Or is this a bug?
My code is on a local network, and I am not allowed to copy it. Please forgive me for not being able to post my configuration. Additionally, this text is machine-translated.
Beta Was this translation helpful? Give feedback.
All reactions