(KIP-368) SASL mechanism GSSAPI authentication failure

2019-07-08 Thread Tyler Monahan
roblem. It doesn't look like kafka is clearing out saved credentials and fully going through the reconnect process to get new credentials for the node. Does anyone know if I am missing something or if this is still an issue with kafka? Tyler Monahan

Clearing saved kerberos credentials on login failure

2018-09-13 Thread Tyler Monahan
quot;kafka2$"; }; KafkaClient { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true storeKey=true keyTab="/etc/krb5.keytab" serviceName="kafka" principal="kafka2$"; }; Tyler Monahan

Re: 90 open file handles for one segment

2018-09-11 Thread Tyler Monahan
documentation I have seen is having the limit set to at least 100,000 which we are both well past. [2018-09-07 14:35:33,872] ERROR Error while accepting connection (kafka.network.Acceptor) java.io.IOException: Too many open files Tyler Monahan On 8/27/18, 12:29 PM, "Matt Kocubinski&qu

Re: Query related to Kafka Consumer Limit

2018-08-29 Thread Tyler Monahan
tiple topics to handle that many consumers. I would recommend doing some research on other very large kafka setups. Consumers also talk directly to kafka in newer versions and shouldn't be talking to zookeeper unless you are using a very old version of kafka. Tyler Monahan

Re: Configuring Kerberos behind an ELB

2018-06-22 Thread Tyler Monahan
some way I can have it use different information for inter broker then it does for incoming consumer/producer connections. Tyler Monahan On Fri, Jun 22, 2018 at 10:27 AM, Martin Gainty wrote: > it appears you want: > common-principal name with common-key distributed to all subdomains >

Re: Configuring Kerberos behind an ELB

2018-06-22 Thread Tyler Monahan
for each broker and feeding in a list of instances to connect to but this is not as flexible as using an elb and does not match our general strategy for infrastructure. If at all possible I would like to get kafka working behind and elb with kerberos. Tyler Monahan On Fri, Jun 22, 2018 at 9:44 AM

Re: Configuring Kerberos behind an ELB

2018-06-22 Thread Tyler Monahan
;t been able to get any of them to work with kafka because it gets traffic through and ELB but also talks to the other brokers directly in my setup. https://ssimo.org/blog/id_019.html Tyler Monahan On Fri, Jun 22, 2018 at 5:36 AM, Martin Gainty wrote: > MG>quoting stackoverflow below >

Configuring Kerberos behind an ELB

2018-06-21 Thread Tyler Monahan
to be a way to configure the inter broker communication to work differently then the incoming consumer communication short of getting rid of kerberos. Any advice would be greatly appreciated. Tyler Monahan