[ https://issues.apache.org/jira/browse/KAFKA-6091?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16212476#comment-16212476 ]
Manikumar edited comment on KAFKA-6091 at 10/20/17 10:36 AM: ------------------------------------------------------------- This behavior is changed in KAFKA-5547. Now clients will fail after any topic authorization errors. was (Author: omkreddy): This behavior is changed in KAFKA-5547. > Authorization API is called hundred's of times when there are no privileges > --------------------------------------------------------------------------- > > Key: KAFKA-6091 > URL: https://issues.apache.org/jira/browse/KAFKA-6091 > Project: Kafka > Issue Type: Bug > Components: security > Affects Versions: 0.11.0.0 > Reporter: kalyan kumar kalvagadda > > This issue is observed with kafka/sentry integration. When sentry does not > have any permissions for a topic and there is a producer trying to add a > message to a topic, sentry returns failure but Kafka is not able to handle it > properly and is ending up invoking sentry Auth API ~564 times. This will > choke authorization service. > Here are the list of privileges that are needed for a producer to add a > message to a topic > In this example "192.168.0.3" is hostname and topic name is "tOpIc1" > {noformat} > HOST=192.168.0.3->Topic=tOpIc1->action=DESCRIBE > HOST=192.168.0.3->Cluster=kafka-cluster->action=CREATE > HOST=192.168.0.3->Topic=tOpIc1->action=WRITE > {noformat} > This problem is reported in this jira is seen when there are no permissions. > Movement a DESCRIBE permission is added, this issue is not seen. > Authorization fails but kafka doesn't bombard with he more requests. -- This message was sent by Atlassian JIRA (v6.4.14#64029)