Kafka Consuption Failure Using Port 21005

Hello, everyone! 

I will share with you how to deal with the problem of consuming failure using port 21005 when using Kafka.

Context and Symptom

Port 21007 could be used for consumption normally. A user had the kafkaadmin permission, and a topic was assigned with the ACL permission. When the user used port 21005 to consume the topic, a message was displayed, indicating that the consumer group did not have the permission.

Cause Analysis

1. The topic was assigned with the ACL permission. As a result, port 21005 could not be used for consumption.

2. The value of allow.everyone.if.no.acl.found was false.

3. The /kafka-acl/Group directory contained ACL authorization.

Solution

1. Manually remove the ACL permission of the topic.

2. Set allow.everyone.if.no.acl.found to true.

3. Delete the ACL authorization in the /kafka-acl/Group directory of ZooKeeper.

   addauth krbgroup

   rmr /kafka/kafka-acl/Group/*

Create an acl_changes_* file in the /kafka-acl-changes directory of ZooKeeper or restart Kafka (do not perform rolling restart).

We warmly welcome you to enjoy our community!