"Kafka SSL：執行主題命令時創建主題錯誤：KeeperErrorCode = NoAuth for \/config\/topics\/ssl-topic"

Question

我已經為 zookeeper 和 Kafka 客戶端設置了 SSL。 Zookeeper server 和 Kafka broker 啟動成功。 雖然我創建了 kafka 主題，但它給出了錯誤。

kafka-topics.bat -zookeeper localhost:2181 --create --topic ssl-topic --partitions 1 --replication-factor 1

錯誤 ：

執行主題命令時出錯：KeeperErrorCode = NoAuth for /config/topics/ssl-topic [2022-02-06 14:08:24,637] ERROR org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /config/topics/ ssl-topic at org.apache.zookeeper.KeeperException.create(KeeperException.java:120) at org.apache.zookeeper.KeeperException.create(KeeperException.java:54) at kafka.zookeeper.AsyncResponse.maybeThrow(ZooKeeperClient.scala: 564）在 kafka.zk.KafkaZkClient.createRecursive(KafkaZkClient.scala:1644) 在 kafka.zk.KafkaZkClient.createOrSet$1(KafkaZkClient.scala:364) 在 kafka.zk.KafkaZkClient.setOrCreateEntityConfigs(KafkaZkClient.scala:374) 在 kafka .zk.AdminZkClient.createTopicWithAssignment(AdminZkClient.scala:93) 在 kafka.zk.AdminZkClient.createTopic(AdminZkClient.scala:57) 在 kafka.admin.TopicCommand$ZookeeperTopicService.createTopic(TopicCommand.scala:353) 在 kafka.admin。在 kafka.admin.TopicCommand$TopicService.c 上的 TopicCommand$TopicService.createTopic(TopicCommand.scala:196) reateTopic$(TopicCommand.scala:191) at kafka.admin.TopicCommand$ZookeeperTopicService.createTopic(TopicCommand.scala:345) at kafka.admin.TopicCommand$.main(TopicCommand.scala:62) at kafka.admin.TopicCommand.main (TopicCommand.scala) (kafka.admin.TopicCommand$)

Zookeeper.properties就像

dataDir=D:/tmp/zookeeper

admin.enableServer=true admin.serverPort=8080

ssl.client.enable=true secureClientPort=2182 authProvider.x509=org.apache.zookeeper.server.auth.X509AuthenticationProvider serverCnxnFactory=org.apache.zookeeper.server.NettyServerCnxnFactory ssl.trustStore.location=C:/kafka_2.12-2.5.0/ssl/kafka.zookeeper.truststore.jks ssl.trustStore.password=pass ssl.keyStore.location=C:/kafka_2.12-2.5.0/ssl/kafka.zookeeper.keystore.jks ssl.keyStore.password=pass ssl.clientAuth=need

Server.properties就像

zookeeper.connect=localhost:2182 
zookeeper.clientCnxnSocket=org.apache.zookeeper.ClientCnxnSocketNetty
zookeeper.ssl.client.enable=true
zookeeper.ssl.protocol=TLSv1.2
zookeeper.ssl.truststore.location=C:/kafka_2.12-2.5.0/ssl/kafka.broker.truststore.jks
zookeeper.ssl.truststore.password=Becker77
zookeeper.ssl.keystore.location=C:/kafka_2.12-2.5.0/ssl/kafka.broker.keystore.jks
zookeeper.ssl.keystore.password=Becker77
zookeeper.set.acl=true


ssl.truststore.location=C:/kafka_2.12-2.5.0/ssl/kafka.broker.truststore.jks
ssl.truststore.password=Becker77
ssl.keystore.location=C:/kafka_2.12-2.5.0/ssl/kafka.broker.keystore.jks
ssl.keystore.password=Becker77
ssl.key.password=Becker77
security.inter.broker.protocol=SSL
ssl.client.auth=required
ssl.protocol=TLSv1.2

Answer 1

嘗試設置zookeeper.set.acl=false<\/code>或配置 acl

"