zhang shuai created KAFKA-4119:
----------------------------------

             Summary: Get topic offset with Kafka SSL&ACL
                 Key: KAFKA-4119
                 URL: https://issues.apache.org/jira/browse/KAFKA-4119
             Project: Kafka
          Issue Type: Bug
          Components: core
    Affects Versions: 0.10.0.1
         Environment: Linux
            Reporter: zhang shuai


I have a kafka cluster with SSL&ACL when i trun off ACL,i can get offset form 
kafka-consumer-offset-checker.sh

[root@node128 kafka_2.11-0.10.0.1]# bin/kafka-consumer-offset-checker.sh 
--zookeeper localhost:2181/kafka-test --group consumer-group-1 --topic testtopic
[2016-09-03 14:03:51,722] WARN WARNING: ConsumerOffsetChecker is deprecated and 
will be dropped in releases following 0.9.0. Use ConsumerGroupCommand instead. 
(kafka.tools.ConsumerOffsetChecker$)
Group           Topic                          Pid Offset          logSize      
   Lag             Owner
consumer-group-1 testtopic                      0   99981           99981       
    0               none

Configuration like this:
ssl.keystore.location=/opt/ssl_key/server.keystore.jks
ssl.keystore.password=xdata123
ssl.key.password=xdata123
ssl.truststore.location=/opt/ssl_key/server.truststore.jks
ssl.truststore.password=xdata123

ssl.client.auth=required
ssl.enabled.protocols=TLSv1.2,TLSv1.1,TLSv1
ssl.keystore.type=JKS
ssl.truststore.type=JKS

security.inter.broker.protocol=SSL

But when i want to use ACL and add configuration

authorizer.class.name=kafka.security.auth.SimpleAclAuthorizer
super.users=User:CN=node128,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown;User:CN=node129,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

Then I use kafka-acls.sh to add principal for topic testtopic and group 
consumer-group-1,

I cannot get result of kafka offset from kafka-consumer-offset-checker.sh. Is 
there something deferent in ACL? How can I get topics` offset in kafka ACL 
model?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to