[ https://issues.apache.org/jira/browse/KAFKA-8117?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Manikumar resolved KAFKA-8117. ------------------------------ Resolution: Duplicate Fix Version/s: (was: 2.3.0) > Flaky Test > DelegationTokenEndToEndAuthorizationTest#testNoProduceWithDescribeAcl > -------------------------------------------------------------------------------- > > Key: KAFKA-8117 > URL: https://issues.apache.org/jira/browse/KAFKA-8117 > Project: Kafka > Issue Type: Bug > Components: core, unit tests > Affects Versions: 2.3.0 > Reporter: Matthias J. Sax > Priority: Critical > Labels: flaky-test > > [https://builds.apache.org/blue/organizations/jenkins/kafka-trunk-jdk8/detail/kafka-trunk-jdk8/3470/tests] > {quote}java.util.concurrent.ExecutionException: > org.apache.kafka.common.errors.SaslAuthenticationException: Authentication > failed during authentication due to invalid credentials with SASL mechanism > SCRAM-SHA-256 > at > org.apache.kafka.common.internals.KafkaFutureImpl.wrapAndThrow(KafkaFutureImpl.java:45) > at > org.apache.kafka.common.internals.KafkaFutureImpl.access$000(KafkaFutureImpl.java:32) > at > org.apache.kafka.common.internals.KafkaFutureImpl$SingleWaiter.await(KafkaFutureImpl.java:89) > at > org.apache.kafka.common.internals.KafkaFutureImpl.get(KafkaFutureImpl.java:260) > at > kafka.api.DelegationTokenEndToEndAuthorizationTest.createDelegationToken(DelegationTokenEndToEndAuthorizationTest.scala:88) > at > kafka.api.DelegationTokenEndToEndAuthorizationTest.configureSecurityAfterServersStart(DelegationTokenEndToEndAuthorizationTest.scala:63) > at > kafka.integration.KafkaServerTestHarness.setUp(KafkaServerTestHarness.scala:107) > at kafka.api.IntegrationTestHarness.doSetup(IntegrationTestHarness.scala:81) > at kafka.api.IntegrationTestHarness.setUp(IntegrationTestHarness.scala:73) > at > kafka.api.EndToEndAuthorizationTest.setUp(EndToEndAuthorizationTest.scala:183) > at > kafka.api.DelegationTokenEndToEndAuthorizationTest.setUp(DelegationTokenEndToEndAuthorizationTest.scala:74){quote} > STDOUT > {quote}Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Create from hosts: * > > [2019-03-16 03:39:08,540] WARN Unable to read additional data from client > sessionid 0x1045892126e0013, likely client has closed socket > (org.apache.zookeeper.server.NIOServerCnxn:376) > [2019-03-16 03:39:08,634] ERROR [Consumer clientId=consumer-21, > groupId=group] Topic authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:297) > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:PREFIXED:e2e`: > User:scram-user has Allow permission for operations: Read from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > > Adding ACLs for resource `Group:PREFIXED:gr`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:PREFIXED:e2e`: > User:scram-user has Allow permission for operations: Read from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > > Current ACLs for resource `Group:PREFIXED:gr`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Read from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:LITERAL:topic2`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Current ACLs for resource `Topic:LITERAL:topic2`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Topic:LITERAL:topic2`: > User:scram-user has Allow permission for operations: Read from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:topic2`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-user has Allow permission for operations: Read from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > > Adding ACLs for resource `Group:LITERAL:*`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > User:scram-user has Allow permission for operations: Read from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > User:scram-user has Allow permission for operations: Write from hosts: * > > Current ACLs for resource `Group:LITERAL:*`: > User:scram-user has Allow permission for operations: Read from hosts: * > > [2019-03-16 03:39:36,082] WARN Unable to read additional data from client > sessionid 0x104589279390008, likely client has closed socket > (org.apache.zookeeper.server.NIOServerCnxn:376) > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Create from hosts: * > > [2019-03-16 03:39:45,276] ERROR [Consumer clientId=consumer-28, > groupId=group] Topic authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:297) > [2019-03-16 03:39:45,832] WARN Unable to read additional data from client > sessionid 0x10458929fe3000a, likely client has closed socket > (org.apache.zookeeper.server.NIOServerCnxn:376) > [2019-03-16 03:39:46,138] WARN Unable to read additional data from client > sessionid 0x10458929fe30008, likely client has closed socket > (org.apache.zookeeper.server.NIOServerCnxn:376) > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > [2019-03-16 03:39:49,798] WARN Unable to read additional data from client > sessionid 0x1045892ba700001, likely client has closed socket > (org.apache.zookeeper.server.NIOServerCnxn:376) > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > [2019-03-16 03:39:55,125] ERROR [AdminClient clientId=adminclient-31] > Connection to node -1 (localhost/127.0.0.1:42973) failed authentication due > to: Authentication failed during authentication due to invalid credentials > with SASL mechanism SCRAM-SHA-256 (org.apache.kafka.clients.NetworkClient:714) > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > Adding ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Read from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > > Adding ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:scram-user has Allow permission for operations: Write from hosts: * > User:scram-user has Allow permission for operations: Create from hosts: * > User:scram-user has Allow permission for operations: Describe from hosts: * > User:scram-user has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Group:LITERAL:group`: > User:scram-user has Allow permission for operations: Read from hosts: * > > Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:scram-admin has Allow permission for operations: ClusterAction from > hosts: * > > Adding ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Current ACLs for resource `Topic:LITERAL:*`: > User:scram-admin has Allow permission for operations: Read from hosts: * > > Completed Updating config for entity: user-principal 'scram-admin'. > Completed Updating config for entity: user-principal 'scram-user'. > [2019-03-16 03:40:04,766] ERROR [Producer clientId=producer-133] Topic > authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:297){quote} > -- This message was sent by Atlassian JIRA (v7.6.3#76005)