[jira] [Updated] (SENTRY-2535) SentryKafkaAuthorizer throws Exception when describing ACLs

2019-11-06 Thread Kalyan Kalvagadda (Jira) 


 [ 
https://issues.apache.org/jira/browse/SENTRY-2535?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Kalyan Kalvagadda updated SENTRY-2535:
--
Status: Patch Available  (was: Open)

> SentryKafkaAuthorizer throws Exception when describing ACLs
> ---
>
> Key: SENTRY-2535
> URL: https://issues.apache.org/jira/browse/SENTRY-2535
> Project: Sentry
>  Issue Type: Bug
>  Components: Sentry
>Reporter: Gergo Wilder
>Assignee: Gergo Wilder
>Priority: Major
>
> ConsumerGroup resource type is not handled properly in SentryKafkaAuthorizer 
> causing an exception when converting from Sentry consumer group resource type 
> to Kafka's consumer group resource type.
> {noformat}
>  2019-10-25 12:30:17,992 ERROR kafka.server.KafkaApis: [KafkaApi-6] Error 
> when handling request: clientId=adminclient-83, correlationId=1158, 
> api=DESCRIBE_ACLS, 
> body={resource_type=2,resource_name=null,resource_pattern_type_filter=1,principal=null,host=null,operation=1,permission_type=1}
> kafka.common.KafkaException: CONSUMERGROUP not a valid resourceType name. The 
> valid names are Topic,Group,Cluster,TransactionalId,DelegationToken
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at scala.Option.getOrElse(Option.scala:121)
> at kafka.security.auth.ResourceType$.fromString(ResourceType.scala:64)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.rolePrivilegesToResourceAcls(KafkaAuthBinding.java:481)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAclsForRoles(KafkaAuthBinding.java:463)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAcls(KafkaAuthBinding.java:379)
> at 
> org.apache.sentry.kafka.authorizer.SentryKafkaAuthorizer.getAcls(SentryKafkaAuthorizer.java:93)
> at kafka.server.KafkaApis.handleDescribeAcls(KafkaApis.scala:1911)
> at kafka.server.KafkaApis.handle(KafkaApis.scala:137)
> at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:74)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

[jira] [Updated] (SENTRY-2535) SentryKafkaAuthorizer throws Exception when describing ACLs

2019-11-06 Thread Kalyan Kalvagadda (Jira) 


 [ 
https://issues.apache.org/jira/browse/SENTRY-2535?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Kalyan Kalvagadda updated SENTRY-2535:
--
Attachment: SENTRY-2535.001.patch

> SentryKafkaAuthorizer throws Exception when describing ACLs
> ---
>
> Key: SENTRY-2535
> URL: https://issues.apache.org/jira/browse/SENTRY-2535
> Project: Sentry
>  Issue Type: Bug
>  Components: Sentry
>Reporter: Gergo Wilder
>Assignee: Gergo Wilder
>Priority: Major
> Attachments: SENTRY-2535.001.patch
>
>
> ConsumerGroup resource type is not handled properly in SentryKafkaAuthorizer 
> causing an exception when converting from Sentry consumer group resource type 
> to Kafka's consumer group resource type.
> {noformat}
>  2019-10-25 12:30:17,992 ERROR kafka.server.KafkaApis: [KafkaApi-6] Error 
> when handling request: clientId=adminclient-83, correlationId=1158, 
> api=DESCRIBE_ACLS, 
> body={resource_type=2,resource_name=null,resource_pattern_type_filter=1,principal=null,host=null,operation=1,permission_type=1}
> kafka.common.KafkaException: CONSUMERGROUP not a valid resourceType name. The 
> valid names are Topic,Group,Cluster,TransactionalId,DelegationToken
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at scala.Option.getOrElse(Option.scala:121)
> at kafka.security.auth.ResourceType$.fromString(ResourceType.scala:64)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.rolePrivilegesToResourceAcls(KafkaAuthBinding.java:481)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAclsForRoles(KafkaAuthBinding.java:463)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAcls(KafkaAuthBinding.java:379)
> at 
> org.apache.sentry.kafka.authorizer.SentryKafkaAuthorizer.getAcls(SentryKafkaAuthorizer.java:93)
> at kafka.server.KafkaApis.handleDescribeAcls(KafkaApis.scala:1911)
> at kafka.server.KafkaApis.handle(KafkaApis.scala:137)
> at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:74)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

[jira] [Updated] (SENTRY-2535) SentryKafkaAuthorizer throws Exception when describing ACLs

2019-11-06 Thread Gergo Wilder (Jira) 


 [ 
https://issues.apache.org/jira/browse/SENTRY-2535?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Gergo Wilder updated SENTRY-2535:
-
Attachment: SENTRY-2535.002.patch

> SentryKafkaAuthorizer throws Exception when describing ACLs
> ---
>
> Key: SENTRY-2535
> URL: https://issues.apache.org/jira/browse/SENTRY-2535
> Project: Sentry
>  Issue Type: Bug
>  Components: Sentry
>Reporter: Gergo Wilder
>Assignee: Gergo Wilder
>Priority: Major
> Attachments: SENTRY-2535.001.patch, SENTRY-2535.002.patch
>
>
> ConsumerGroup resource type is not handled properly in SentryKafkaAuthorizer 
> causing an exception when converting from Sentry consumer group resource type 
> to Kafka's consumer group resource type.
> {noformat}
>  2019-10-25 12:30:17,992 ERROR kafka.server.KafkaApis: [KafkaApi-6] Error 
> when handling request: clientId=adminclient-83, correlationId=1158, 
> api=DESCRIBE_ACLS, 
> body={resource_type=2,resource_name=null,resource_pattern_type_filter=1,principal=null,host=null,operation=1,permission_type=1}
> kafka.common.KafkaException: CONSUMERGROUP not a valid resourceType name. The 
> valid names are Topic,Group,Cluster,TransactionalId,DelegationToken
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at scala.Option.getOrElse(Option.scala:121)
> at kafka.security.auth.ResourceType$.fromString(ResourceType.scala:64)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.rolePrivilegesToResourceAcls(KafkaAuthBinding.java:481)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAclsForRoles(KafkaAuthBinding.java:463)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAcls(KafkaAuthBinding.java:379)
> at 
> org.apache.sentry.kafka.authorizer.SentryKafkaAuthorizer.getAcls(SentryKafkaAuthorizer.java:93)
> at kafka.server.KafkaApis.handleDescribeAcls(KafkaApis.scala:1911)
> at kafka.server.KafkaApis.handle(KafkaApis.scala:137)
> at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:74)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

[jira] [Updated] (SENTRY-2535) SentryKafkaAuthorizer throws Exception when describing ACLs

2019-11-06 Thread Na Li (Jira) 


 [ 
https://issues.apache.org/jira/browse/SENTRY-2535?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Na Li updated SENTRY-2535:
--
Attachment: SENTRY-2535.002.patch

> SentryKafkaAuthorizer throws Exception when describing ACLs
> ---
>
> Key: SENTRY-2535
> URL: https://issues.apache.org/jira/browse/SENTRY-2535
> Project: Sentry
>  Issue Type: Bug
>  Components: Sentry
>Reporter: Gergo Wilder
>Assignee: Gergo Wilder
>Priority: Major
> Attachments: SENTRY-2535.001.patch, SENTRY-2535.002.patch, 
> SENTRY-2535.002.patch
>
>
> ConsumerGroup resource type is not handled properly in SentryKafkaAuthorizer 
> causing an exception when converting from Sentry consumer group resource type 
> to Kafka's consumer group resource type.
> {noformat}
>  2019-10-25 12:30:17,992 ERROR kafka.server.KafkaApis: [KafkaApi-6] Error 
> when handling request: clientId=adminclient-83, correlationId=1158, 
> api=DESCRIBE_ACLS, 
> body={resource_type=2,resource_name=null,resource_pattern_type_filter=1,principal=null,host=null,operation=1,permission_type=1}
> kafka.common.KafkaException: CONSUMERGROUP not a valid resourceType name. The 
> valid names are Topic,Group,Cluster,TransactionalId,DelegationToken
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at scala.Option.getOrElse(Option.scala:121)
> at kafka.security.auth.ResourceType$.fromString(ResourceType.scala:64)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.rolePrivilegesToResourceAcls(KafkaAuthBinding.java:481)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAclsForRoles(KafkaAuthBinding.java:463)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAcls(KafkaAuthBinding.java:379)
> at 
> org.apache.sentry.kafka.authorizer.SentryKafkaAuthorizer.getAcls(SentryKafkaAuthorizer.java:93)
> at kafka.server.KafkaApis.handleDescribeAcls(KafkaApis.scala:1911)
> at kafka.server.KafkaApis.handle(KafkaApis.scala:137)
> at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:74)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

[jira] [Updated] (SENTRY-2535) SentryKafkaAuthorizer throws Exception when describing ACLs

2019-11-07 Thread Na Li (Jira) 


 [ 
https://issues.apache.org/jira/browse/SENTRY-2535?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Na Li updated SENTRY-2535:
--
Resolution: Fixed
Status: Resolved  (was: Patch Available)

[~gwilder] Thanks for your contributions!

> SentryKafkaAuthorizer throws Exception when describing ACLs
> ---
>
> Key: SENTRY-2535
> URL: https://issues.apache.org/jira/browse/SENTRY-2535
> Project: Sentry
>  Issue Type: Bug
>  Components: Sentry
>Reporter: Gergo Wilder
>Assignee: Gergo Wilder
>Priority: Major
> Attachments: SENTRY-2535.001.patch, SENTRY-2535.002.patch, 
> SENTRY-2535.002.patch
>
>
> ConsumerGroup resource type is not handled properly in SentryKafkaAuthorizer 
> causing an exception when converting from Sentry consumer group resource type 
> to Kafka's consumer group resource type.
> {noformat}
>  2019-10-25 12:30:17,992 ERROR kafka.server.KafkaApis: [KafkaApi-6] Error 
> when handling request: clientId=adminclient-83, correlationId=1158, 
> api=DESCRIBE_ACLS, 
> body={resource_type=2,resource_name=null,resource_pattern_type_filter=1,principal=null,host=null,operation=1,permission_type=1}
> kafka.common.KafkaException: CONSUMERGROUP not a valid resourceType name. The 
> valid names are Topic,Group,Cluster,TransactionalId,DelegationToken
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at scala.Option.getOrElse(Option.scala:121)
> at kafka.security.auth.ResourceType$.fromString(ResourceType.scala:64)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.rolePrivilegesToResourceAcls(KafkaAuthBinding.java:481)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAclsForRoles(KafkaAuthBinding.java:463)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAcls(KafkaAuthBinding.java:379)
> at 
> org.apache.sentry.kafka.authorizer.SentryKafkaAuthorizer.getAcls(SentryKafkaAuthorizer.java:93)
> at kafka.server.KafkaApis.handleDescribeAcls(KafkaApis.scala:1911)
> at kafka.server.KafkaApis.handle(KafkaApis.scala:137)
> at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:74)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

[jira] [Updated] (SENTRY-2535) SentryKafkaAuthorizer throws Exception when describing ACLs

2020-01-02 Thread Kalyan Kalvagadda (Jira) 


 [ 
https://issues.apache.org/jira/browse/SENTRY-2535?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Kalyan Kalvagadda updated SENTRY-2535:
--
Fix Version/s: 2.2.0

> SentryKafkaAuthorizer throws Exception when describing ACLs
> ---
>
> Key: SENTRY-2535
> URL: https://issues.apache.org/jira/browse/SENTRY-2535
> Project: Sentry
>  Issue Type: Bug
>  Components: Sentry
>Reporter: Gergo Wilder
>Assignee: Gergo Wilder
>Priority: Major
> Fix For: 2.2.0
>
> Attachments: SENTRY-2535.001.patch, SENTRY-2535.002.patch, 
> SENTRY-2535.002.patch
>
>
> ConsumerGroup resource type is not handled properly in SentryKafkaAuthorizer 
> causing an exception when converting from Sentry consumer group resource type 
> to Kafka's consumer group resource type.
> {noformat}
>  2019-10-25 12:30:17,992 ERROR kafka.server.KafkaApis: [KafkaApi-6] Error 
> when handling request: clientId=adminclient-83, correlationId=1158, 
> api=DESCRIBE_ACLS, 
> body={resource_type=2,resource_name=null,resource_pattern_type_filter=1,principal=null,host=null,operation=1,permission_type=1}
> kafka.common.KafkaException: CONSUMERGROUP not a valid resourceType name. The 
> valid names are Topic,Group,Cluster,TransactionalId,DelegationToken
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at 
> kafka.security.auth.ResourceType$$anonfun$fromString$1.apply(ResourceType.scala:64)
> at scala.Option.getOrElse(Option.scala:121)
> at kafka.security.auth.ResourceType$.fromString(ResourceType.scala:64)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.rolePrivilegesToResourceAcls(KafkaAuthBinding.java:481)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAclsForRoles(KafkaAuthBinding.java:463)
> at 
> org.apache.sentry.kafka.binding.KafkaAuthBinding.getAcls(KafkaAuthBinding.java:379)
> at 
> org.apache.sentry.kafka.authorizer.SentryKafkaAuthorizer.getAcls(SentryKafkaAuthorizer.java:93)
> at kafka.server.KafkaApis.handleDescribeAcls(KafkaApis.scala:1911)
> at kafka.server.KafkaApis.handle(KafkaApis.scala:137)
> at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:74)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)