kafka配置SASL_SCRAM认证不通过

Question

最近在做kafka的SASL_SCRAM认证，按照网上查的各种资料。做好配置，但是起了kafka节点之间以后一直报错：
Authentication failed during authentication due to invalid credentials with SASL mechanism SCRAM-SHA-256。检查各项配置和网上没有问题，不应该出现验证不通过的情况，麻烦大佬指导一下。以下是安装的相关信息：

• zookeeper 3.8.4
  配置：
  zoo.cfg

  #zk SASL
  authProvider.1=org.apache.zookeeper.server.auth.SASLAuthenticationProvider
  jaasLoginRenew=3600000
  requireClientAuthScheme=sasl
  zookeeper.sasl.client=true
  

  zk_jaas.conf

  Server {
    org.apache.zookeeper.server.auth.DigestLoginModule required
    username="admin"
    password="123456"
    user_kafka="123456";
  };
  

  zkEnv.sh

  export SERVER_JVMFLAGS="-Djava.security.auth.login.config=/opt/bigdata/zookeeper_3.8.4/conf/zk_jaas.conf"
  export SERVER_JVMFLAGS="-Xmx${ZK_SERVER_HEAP}m $SERVER_JVMFLAGS"
  

• kafka 3.8.0
  启动之前先执行添加用户命令:

  bin/kafka-configs.sh --zookeeper bigdata001:2181 --alter --add-config 'SCRAM-SHA-256=[password=123456],SCRAM-SHA-512=[password=123456]' --entity-type users --entity-name amin
  bin/kafka-configs.sh --zookeeper bigdata001:2181 --alter --add-config 'SCRAM-SHA-256=[password=123456],SCRAM-SHA-512=[password=123456]' --entity-type users --entity-name bigdata
  bin/kafka-configs.sh --zookeeper bigdata001:2181 --alter --add-config 'SCRAM-SHA-256=[password=123456],SCRAM-SHA-512=[password=123456]' --entity-type users --entity-name kafka
  

  server.properties

  listeners=SASL_PLAINTEXT://bigdata002:9092
  advertised.listeners=SASL_PLAINTEXT://bigdata002:9092
  sasl.enabled.mechanisms=SCRAM-SHA-256
  allow.everyone.if.no.acl.found=true
  authorizer.class.name=kafka.security.authorizer.AclAuthorizer
  security.inter.broker.protocol=SASL_PLAINTEXT
  sasl.mechanism.inter.broker.protocol=SCRAM-SHA-256
  sasl.enabled.mechanisms=SCRAM-SHA-256
  super.users=User:admin
  

  kafka_server_jaas.conf

  KafkaServer {
  org.apache.kafka.common.security.scram.ScramLoginModule required
  username="admin"
  password="123456";
  };
  KafkaClient {
  org.apache.kafka.common.security.scram.ScramLoginModule required
  username="bigdata"
  password="123456";
  };
  Client {
  org.apache.kafka.common.security.scram.ScramLoginModule required
  username="kafka"
  password="123456";
  };
  

  kafka-run-class.sh

  # Generic jvm settings you want to add
  if [ -z "$KAFKA_OPTS" ]; then
  KAFKA_OPTS="-Djava.security.auth.login.config=/opt/bigdata/kafka_2.12-3.8.0/config/kafka_server_jaas.conf"
  #KAFKA_OPTS=""
  fi
  

Answer 1

1. 用户名和密码：确保你在配置文件中输入的用户名和密码是正确的。这是最常见的问题之一。
2. 配置文件：检查你的server.properties文件中的配置是否正确。确保sasl.enabled.mechanisms和sasl.mechanism.inter.broker.protocol都设置为SCRAM-SHA-256。
3. 用户创建：确保你已经在Kafka中创建了用户，并且正确配置了SCRAM凭证。可以使用kafka-configs.sh命令来创建用户和配置SCRAM凭证。
4. 权限：确保你的Kafka账户拥有访问权限。检查Kafka的ACL配置，确保相关权限已经正确设置。