Kafka Error DELEGATION_TOKEN_NOT_FOUND
Error code 62 · Non-retriable Security
Delegation Token is not found on server.
Common Causes
- Token was never created on this cluster, or was created on a different cluster (tokens are cluster-local)
- Token expired and was garbage-collected by the broker before the client attempted to use it
- Token was explicitly deleted via `kafka-delegation-tokens.sh --expire` before its expiry time
Solutions
- List existing tokens with `kafka-delegation-tokens.sh --bootstrap-server localhost:9092 --describe` to confirm the token exists
- Re-create the delegation token using `kafka-delegation-tokens.sh --bootstrap-server localhost:9092 --create --max-life-time-period -1` and redistribute to clients
- Implement token renewal before expiry using `kafka-delegation-tokens.sh --renew` or the AdminClient API in your application
Diagnostic Commands
# List tokens and check ownership
kafka-delegation-tokens.sh --bootstrap-server localhost:9092 --describe --owner-principal User:<user>
# Look for delegation token events in logs
grep 'DelegationToken\|token.not.found' /path/to/kafka/logs/server.log | tail -20Related APIs
This error can be returned by: ExpireDelegationToken · RenewDelegationToken
Debugging Kafka errors? Conduktor Console gives you real-time visibility into your cluster. Explore all errors in the Error Decoder.