SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols.
Questions tagged [sasl]
424 questions
0
votes
0 answers
Error during connection to Event Hub with spring boot kafka
I have a spring boot application that use spring-kafka to connect to an azure event hub ( kafka enabled);
These are the SASL Consumer properties:
props.put(CommonClientConfigs.SECURITY_PROTOCOL_CONFIG, "SASL_SSL");
…
S-Wing
- 485
- 6
- 25
0
votes
1 answer
Enable Authentication on strimzi kafka
i'm tyring to enable authentication on strimzi kafka. below is my yml
apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
name: my-cluster
spec:
kafka:
version: 3.2.1
replicas: 1
listeners:
- name: plain
port:…
Faheem Sultan
- 193
- 2
- 5
- 23
0
votes
1 answer
Configure SASL_PAINTEXT over multiple Kafka Brokers
I am trying to setup a kafka statefulset on Kubernetes scaled up to 3 pods & want to have all kafka brokers to be able to connect with SASL_PLAINTEXT mechanism, however I'm getting the result that only one broker is able to connect & it blocks the…
Nesrinehk1
- 23
- 7
0
votes
0 answers
Unable to access HiveServer2 from LAN on port 10000. Able to access it from localhost. Tested this using beeline
Unable to access HiveServer2 from LAN on port 10000 but able to access it from locahost. Tested this using beeline.
hive.server2.thrift.bind.host is set to 0.0.0.0
hive.server2.webui.host is set to 0.0.0.0
I am able to access 10002 from LAN but not…
Vatsal
- 33
- 3
0
votes
0 answers
Kafka client SSL certificate reloading in spring-boot-kafka?
I have spring boot services using spring-boot-kafka (similar config to https://www.baeldung.com/spring-boot-kafka-ssl ).
I have short lived certificates (7 days) accesible from a shared network file system to all my services that are daily updated,…
domgom
- 283
- 2
- 9
0
votes
0 answers
add user to kafka authentication without cluster restart
We want to add authentication to our kafka cluster by using SASL_SSL.
As we see that we want to be able to frequently add users we are looking for at way to do this without having to perform a rolling…
kimiya
- 1
- 1
0
votes
0 answers
Intermittent OAuth Gmail IMAP authentication failure - no response from server
I have a java client using javamail and google example code to connect to gmail IMAP server using a client secret and OAuth token. The issue is that about 1/3 of the time, the com.sun.mail.imap.IMAPStore.protocolConnect call fails with an…
linus
- 138
- 9
0
votes
0 answers
How to make SASL JAAS working on Kafka on Kubernetes?
I'm trying to set up Kafka on kubernetes, I setup 2 listeners and attached SASL PLAIN mechanism for both from JAAS. JAAS config loaded from k8s Secret.
Somehow, its not accepting credentials and throwing authentication error, I couldn't figure out…
Naren Karanam
- 61
- 1
- 3
- 10
0
votes
1 answer
Kafka : broker has no supported SASL mechanisms on some listener
I am trying to gradually enable ACLs on a existing cluster (3.1.0 bitnami helm chart) which is configured like this…
MrLuje
- 637
- 6
- 15
0
votes
1 answer
How can I periodically get new access_token using sasl with oauthbearer for kafka producer and consumer using kafkajs before the token expires?
const axios = require('axios');
const dotenv = require('dotenv');
dotenv.config();
const { Kafka } = require('kafkajs');
var qs = require('qs');
var data = qs.stringify({
'client_id': process.env.CLIENT_ID,
'client_secret':…
Atiq Baqi
- 612
- 1
- 7
- 16
0
votes
0 answers
Trying to run my server.js file and getting the error 'SASL: SCRAM-SERVER-FIRST-MESSAGE: client password must be a string'
I checked the user in psql and there is no password set up for the user and the db created does not have a password created.
I made the user a superuser, made sure there was no password set for user and db. Not sure where else to look for where the…
macky
- 1
0
votes
1 answer
How to force Java Mail to use XOAUTH2 mechanism instead of PLAIN?
I am trying to use Java Mail to connect to an IMAP server using XOAUTH2. The configuration is as follows:
Properties properties= new Properties();
properties.put("mail.imap.ssl.enable", "true");
properties.put("mail.imap.auth.mechanisms",…
Jucaalpa
- 310
- 1
- 4
- 15
0
votes
0 answers
Quarkus Kafka Streams App unable to use SASL PLAIN mechanism: Unexpected handshake request with client mechanism PLAIN, enabled mechanisms are []
I've been developing a Kafka stream processing application with the Quarkus-Framework in Java. Now I'm trying to connect to the Kafka brokers via the SASL/PLAIN mechanism, but am getting the following error:
2022-10-27 10:52:06,736 ERROR…
larissaphone
- 194
- 10
0
votes
0 answers
AWS Glue - Kafka Connection using SASL/SCRAM
I am trying to create an AWS Glue Streaming job that reads from Kafka (MSK) clusters using SASL/SCRAM client authentication for the connection,…
0
votes
0 answers
Invalid login module control flag 'requiredusername' in JAAS config
While trying to Produce some message to Kafka topic Iam getting "Invalid login module control flag 'requiredusername' in JAAS config".I have specified the correct username and password in Jaas Config of ProducerConfig
