hmm ok
could you share your confs?
will try to reproduce if possible
Yeah ofc. I will share 1 broker and 1 controller and anonymize some details:
Controller
process.roles=controller
node.id=4
controller.quorum.voters=4@host1:24170,5@host2:24170,6@host3:24170
controller.listener.names=CONTROLLER
listeners=CONTROLLER://:24170
listener.security.protocol.map=CONTROLLER:SASL_PLAINTEXT
log.dirs=/opt/kafka/kraft
authorizer.class.name=org.apache.kafka.metadata.authorizer.StandardAuthorizer
sasl.enabled.mechanisms=PLAIN
sasl.mechanism.controller.protocol=PLAIN
allow.everyone.if.no.acl.found=false
super.users=User:admin;User:adminuser
Broker
############################# Server Basics #############################
process.roles=broker
node.id=1
############################# Socket Server Settings #############################
listeners=SASL-1://host1extip:25170,SASL-2://host1mngip:25180,SASL-INTERNAL://host1:9093,SASLSSL-1://host1extip:25179,SASLSSL-2://host1mngip:25189,PLAINTEXT-1://host1extip:25175
listener.security.protocol.map=SASL-1:SASL_PLAINTEXT,SASL-2:SASL_PLAINTEXT,SASL-INTERNAL:SASL_SSL,SASLSSL-1:SASL_SSL,SASLSSL-2:SASL_SSL,PLAINTEXT-1:PLAINTEXT,CONTROLLER:SASL_PLAINTEXT
inter.broker.listener.name=SASL-INTERNAL
sasl.mechanism.inter.broker.protocol=PLAIN
sasl.enabled.mechanisms=SCRAM-SHA-512,SCRAM-SHA-256,PLAIN
sasl.mechanism.controller.protocol=PLAIN
ssl.keystore.location=/home/user1/etc/ssl/node.ks
ssl.keystore.password=kspass
ssl.key.password=kspass
ssl.truststore.location=/home/user1/etc/ssl/node.ts
ssl.truststore.password=tspass
ssl.client.auth=none
num.network.threads=3
num.io.threads=8
socket.send.buffer.bytes=102400
socket.receive.buffer.bytes=102400
socket.request.max.bytes=104857600
############################# Log Basics #############################
log.dirs=/opt/kafka/data
num.partitions=3
default.replication.factor=2
num.recovery.threads.per.data.dir=1
############################# Internal Topic Settings #############################
offsets.topic.replication.factor=3
transaction.state.log.replication.factor=3
transaction.state.log.min.isr=1
############################# Log Retention Policy #############################
log.retention.hours=168
log.segment.bytes=1073741824
log.retention.check.interval.ms=300000
############################# KRaft #############################
# KRaft controller quorum configuration
controller.quorum.voters=4@host1:24170,5@host2:24170,6@host3:24170
controller.listener.names=CONTROLLER
confluent.support.metrics.enable=false
confluent.support.customer.id=anonymous
group.initial.rebalance.delay.ms=3000
auto.create.topics.enable=false
delete.topic.enable=true
authorizer.class.name=org.apache.kafka.metadata.authorizer.StandardAuthorizer
allow.everyone.if.no.acl.found=false
super.users=User:admin
confluent.consumer.lag.emitter.enabled=true
confluent.consumer.lag.emitter.interval.ms=30000
jaas
Then I have some Jaas configs injected through the
-Djava.security.auth.login.config
KafkaServer {
org.apache.kafka.common.security.scram.ScramLoginModule required
username="admin"
password="adminpass";
org.apache.kafka.common.security.plain.PlainLoginModule required
username="admin"
password="adminpass"
user_admin="adminpass":
};
Client {
org.apache.kafka.common.security.plain.PlainLoginModule required
username="admin"
password="adminpass";
};
Well, I would like to share but the bot has my post blocked since last you requested… Is there any other way that I can share them?
Hi @mmuehlbeyer could you reproduce the issue or have any more knowledge on how to downgrade to community?
not yet will keep you posted
This topic is temporarily closed for at least 72 hours due to a large number of community flags.