CDH集群启用kerberos之后配置Kafka-manager

    由于集群启用了kerberos，kafka-manager需做相应的配置才能使用。Kafka-manager安装详见其它文档。没有启用则不需要配置。

1、修改application.conf

vim conf/application.conf

2、修改consumer.properties

vim conf/consumer.properties

security.protocol=SASL_PLAINTEXT

key.deserializer=org.apache.kafka.common.serialization.ByteArrayDeserializer

value.deserialiazer=org.apache.kafka.common.serialization.ByteArrayDeserializer

sasl.mechanism=GSSAPI

sasl.kerberos.service.name=kafka

3、修改jaas.conf

vim conf/jaas.conf

kafkaClient {

  com.sun.security.auth.module.Krb5LoginModule required

  useTicketCache=true

  keyTab="/home/govnetapp/govnetapp.keytab"

  principal="govnetapp@CLOUD.COM";

};

 

Client (

  com.sun.security.auth.module.Krb5LoginModule required

  useKeyTab=true

  KeyTab="/home/govnetapp/govnetapp.keytab"

  storeKey=true

  useTicketCache=false

  principal="zookeeper/qzc1m1.cloud.com@CLOUD.COM"

);

4、启动

在bin目录下新建2个脚本，一个start.sh，一个stop.sh

[govnetapp@qzc1s10 bin]$ cat start.sh

#!/bin/bash

cd `dirname $0`

BIN_DIR=`pwd`

cd ..

DEPLOY_DIR=`pwd`

CONF_DIR=$DEPLOY_DIR/conf

 

bin/kafka-manager -Dconfig.file=${CONF_DIR}/application.conf -Djava.security.auth.login.config=/data/govnetapp/kafka-manager-1.3.3.16/conf/jaas.conf -Djava.security.krb5.conf=/etc/krb5.conf -Dusername.client.keytab.file=/home/govnetapp/govnetapp.keytab -Dzookeeper.server.principal=zookeeper/qzc1m1.cloud.com@CLOUD.COM -Dhttp.port=19999  &

[govnetapp@qzc1s10 bin]$ cat stop.sh

#!/bin/bash

sp_pid=`ps -ef | grep kafka-manager | grep -v grep | awk '{print $2}'`

if [ -z "$sp_pid" ];

then

 echo "not find kafka-manager pid"

else

 kill -9 $sp_pid

 rm -rf /home/govnetapp/kafka-manager-1.3.3.16/RUNNING_PID

fi

启动：sh start.sh

停止：sh stop.sh

5、界面配置

http://10.153.116.8:19999（输入用户密码admin/admin）

6、添加完成后就可以监控了