Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-8117

Flaky Test DelegationTokenEndToEndAuthorizationTest#testNoProduceWithDescribeAcl

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Critical
    • Resolution: Duplicate
    • 2.3.0
    • None
    • core, unit tests

    Description

      https://builds.apache.org/blue/organizations/jenkins/kafka-trunk-jdk8/detail/kafka-trunk-jdk8/3470/tests

      java.util.concurrent.ExecutionException: org.apache.kafka.common.errors.SaslAuthenticationException: Authentication failed during authentication due to invalid credentials with SASL mechanism SCRAM-SHA-256
      at org.apache.kafka.common.internals.KafkaFutureImpl.wrapAndThrow(KafkaFutureImpl.java:45)
      at org.apache.kafka.common.internals.KafkaFutureImpl.access$000(KafkaFutureImpl.java:32)
      at org.apache.kafka.common.internals.KafkaFutureImpl$SingleWaiter.await(KafkaFutureImpl.java:89)
      at org.apache.kafka.common.internals.KafkaFutureImpl.get(KafkaFutureImpl.java:260)
      at kafka.api.DelegationTokenEndToEndAuthorizationTest.createDelegationToken(DelegationTokenEndToEndAuthorizationTest.scala:88)
      at kafka.api.DelegationTokenEndToEndAuthorizationTest.configureSecurityAfterServersStart(DelegationTokenEndToEndAuthorizationTest.scala:63)
      at kafka.integration.KafkaServerTestHarness.setUp(KafkaServerTestHarness.scala:107)
      at kafka.api.IntegrationTestHarness.doSetup(IntegrationTestHarness.scala:81)
      at kafka.api.IntegrationTestHarness.setUp(IntegrationTestHarness.scala:73)
      at kafka.api.EndToEndAuthorizationTest.setUp(EndToEndAuthorizationTest.scala:183)
      at kafka.api.DelegationTokenEndToEndAuthorizationTest.setUp(DelegationTokenEndToEndAuthorizationTest.scala:74)

      STDOUT

      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Create from hosts: *
       
      [2019-03-16 03:39:08,540] WARN Unable to read additional data from client sessionid 0x1045892126e0013, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376)
      [2019-03-16 03:39:08,634] ERROR [Consumer clientId=consumer-21, groupId=group] Topic authorization failed for topics [e2etopic] (org.apache.kafka.clients.Metadata:297)
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:PREFIXED:e2e`:
      User:scram-user has Allow permission for operations: Read from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
       
      Adding ACLs for resource `Group:PREFIXED:gr`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:PREFIXED:e2e`:
      User:scram-user has Allow permission for operations: Read from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
       
      Current ACLs for resource `Group:PREFIXED:gr`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Read from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:LITERAL:topic2`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:topic2`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:topic2`:
      User:scram-user has Allow permission for operations: Read from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:topic2`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-user has Allow permission for operations: Read from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
       
      Adding ACLs for resource `Group:LITERAL:*`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
      User:scram-user has Allow permission for operations: Read from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
      User:scram-user has Allow permission for operations: Write from hosts: *
       
      Current ACLs for resource `Group:LITERAL:*`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      [2019-03-16 03:39:36,082] WARN Unable to read additional data from client sessionid 0x104589279390008, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376)
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Create from hosts: *
       
      [2019-03-16 03:39:45,276] ERROR [Consumer clientId=consumer-28, groupId=group] Topic authorization failed for topics [e2etopic] (org.apache.kafka.clients.Metadata:297)
      [2019-03-16 03:39:45,832] WARN Unable to read additional data from client sessionid 0x10458929fe3000a, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376)
      [2019-03-16 03:39:46,138] WARN Unable to read additional data from client sessionid 0x10458929fe30008, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376)
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      [2019-03-16 03:39:49,798] WARN Unable to read additional data from client sessionid 0x1045892ba700001, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376)
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      [2019-03-16 03:39:55,125] ERROR [AdminClient clientId=adminclient-31] Connection to node -1 (localhost/127.0.0.1:42973) failed authentication due to: Authentication failed during authentication due to invalid credentials with SASL mechanism SCRAM-SHA-256 (org.apache.kafka.clients.NetworkClient:714)
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      Adding ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Read from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
       
      Adding ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:e2etopic`:
      User:scram-user has Allow permission for operations: Write from hosts: *
      User:scram-user has Allow permission for operations: Create from hosts: *
      User:scram-user has Allow permission for operations: Describe from hosts: *
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Group:LITERAL:group`:
      User:scram-user has Allow permission for operations: Read from hosts: *
       
      Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Current ACLs for resource `Cluster:LITERAL:kafka-cluster`:
      User:scram-admin has Allow permission for operations: ClusterAction from hosts: *
       
      Adding ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Current ACLs for resource `Topic:LITERAL:*`:
      User:scram-admin has Allow permission for operations: Read from hosts: *
       
      Completed Updating config for entity: user-principal 'scram-admin'.
      Completed Updating config for entity: user-principal 'scram-user'.
      [2019-03-16 03:40:04,766] ERROR [Producer clientId=producer-133] Topic authorization failed for topics [e2etopic] (org.apache.kafka.clients.Metadata:297)

       

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. KAFKA-8114 Flaky Test DelegationTokenEndToEndAuthorizationTest#testNoGroupAcl

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. KAFKA-8114 Flaky Test DelegationTokenEndToEndAuthorizationTest#testNoGroupAcl

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              mjsax Matthias J. Sax
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: