Event Endpoint Management continues to be enhanced

Event Endpoint Management continues to be available and enhanced as part of IBM's integration platforms.

End of Marketing announcement for IBM Event Automation

Event Streams and Event Processing are deprecated and no enhancements will be provided. Support and security fixes will be provided in line with published support lifecycle policies. Future event-driven solutions that make use of Apache Kafka and Flink will be delivered by IBM Confluent Platform.

For more information, see the support lifecycle transition and software ordering completion announcement.

Attention: This version of Event Streams has reached End of Support. For more information about supported versions, see the support matrix.

Client receives AuthorizationException when communicating with brokers

Symptoms

When executing operations with a Java client connected to Event Streams, the client fails with an error similar to the following message:

[err] [kafka-producer-network-thread | my-client-id] ERROR org.apache.kafka.clients.producer.internals.Sender - [Producer clientId=my-client-id] Aborting producer batches due to fatal error
[err] org.apache.kafka.common.errors.ClusterAuthorizationException: Cluster authorization failed.

Similar messages might also be displayed when using clients written in other languages such as NodeJS.

Causes

The KafkaUser does not have the authorization to perform one of the operations:

  • If there is an authorization error with a topic resource, then a TOPIC_AUTHORIZATION_FAILED (error code: 29) will be returned.
  • If there is an authorization error with a group resource, then a GROUP_AUTHORIZATION_FAILED (error code: 30) will be returned.
  • If there is an authorization error with a cluster resource, then a CLUSTER_AUTHORIZATION_FAILED (error code: 31) will be returned.
  • If there is an authorization error with a transactionalId resource, then a TRANSACTIONAL_ID_AUTHORIZATION_FAILED (error code: 32) will be returned.

In Java, the errors are thrown in the format <resource>AuthorizationException. Other clients might return the error directly or translate it into an error with a similar name.

Resolving the problem

Ensure the KafkaUser has the required permissions as described in managing access.