SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols.
Questions tagged [sasl]
424 questions
2
votes
0 answers
How to add configuration setting for sasl.mechanism PLAIN (API) and GSSAPI (Kerberos) authentication in python script
Need some help to set the configuration for sasl.mechanism PLAIN (API) and GSSAPI (Kerberos) authentication.
We are using confluent Kafka here, there are two scripts, one a python script and the second one is a bash script which calls the python…

sparsh bhardwaj
- 93
- 2
- 8
2
votes
2 answers
Using EXTERNAL mechanism with Cyrus SASL
Does the Cyrus SASL api not support the EXTERNAL mechanism? I'm trying to
use it as a client, but it returns SASL_NOMECH when asked.
% cat cyrus_sal_ex.c
/* cyrus_sasl_ex.c: Example of using the Cyrus SASL api */
#include /* for…

rampion
- 87,131
- 49
- 199
- 315
2
votes
2 answers
How does SASL_SSL security protocol work? Does client verify the server (X.509 cert)?
How SSL works is well know as it's quite widely used and described well every where. In short - SSL involves
Verifying server authenticity by client by verifying the servers X.509 certificate.
Then arriving at a symmetric key using diffie-hellman…

joven
- 371
- 1
- 6
- 17
2
votes
1 answer
kafka-python: Connection reset during recv when using SASL_SSL + SCRAM-SHA-512
I am using kafka-python to connect to Kafka Cluster using SASL
consumer = KafkaConsumer(bootstrap_servers=['fooserver1:9092', 'fooserver2:9092'], client_id='foo', api_version=(2,2,1), security_protocol='SASL_SSL', sasl_mechanism='SCRAM-SHA-512',…

NinjaTurtle
- 93
- 1
- 6
2
votes
0 answers
can't get testcontainers Kafka with sasl.jaas.config to test ACLs to work
I'm trying to leverage testcontainers to test Kafka locally in some automated unit tests. I'm having trouble testing authorization.
My goal is to test
(1) if there are no ACLs in this test container that no KafkaProducer should be allowed to write…

hhprogram
- 2,809
- 3
- 13
- 25
2
votes
0 answers
LDAP / SASL Client "unable to canonify user and get auxprops"
I'm trying to get some simple username / password authentification against a LDAP / AD server. To test my code I setup a openLDAP Server on my local Ubuntu 18.04. The Application is based on QT 5.12, but this shouldn't have a big influence.
My Goal…

DasKeks
- 41
- 4
2
votes
1 answer
Setup client side SASL authentication to connect with two different kafka clusters
I have spring boot application which connect to my kafka cluster.
Application(as kafka client) uses SASL authentication and I specified JAAS configuration through System.setProperty() before initializing kafka producer and consumer.
It is working…

n32
- 25
- 1
- 4
2
votes
1 answer
Zookeeper: cnxn.saslServer is null and Kafka:the quorum member's saslToken is null
To provide access to only kafka for creating, deleting topics, I am creating a plaintext SASL security between kafka and zookeeper. I get the following error and can not figure out why.
zookeeper_1 | 2020-07-20 10:19:06,907 [myid:] - ERROR…

Imam Bux
- 1,006
- 11
- 27
2
votes
1 answer
Active directory SASL Authentication using Apache HTTPSever 2.4.x
In 2020, Microsoft will be addressing CVE-2017-8563 a set of unsafe default configurations for LDAP channel binding and LDAP signing which exist on Active Directory domain controllers that let LDAP clients communicate with them without enforcing…

Rohit Gaikwad
- 3,677
- 3
- 17
- 40
2
votes
0 answers
How can I use the DirectoryServices.Protocols.AuthType library and Negotiate AuthType with Novell?
I am currently working on an LDAP connection.
The code is using the DirectoryServices library, and I would like to only use the Novell library. I already replaced all the requests and connections by the right ones.
Now I am stuck because I don't now…

Elodie
- 21
- 1
2
votes
1 answer
ClusterAuthorizationException in Kafka while creating topic
Our Confluent Kafka is installed on AWS EC2. We are using SASL/SSL security protocol and LDAP for user authentication.
The following exception occurs when trying to create a topic:
ERROR [KafkaApi-0] Error when handling request: clientId=2,…

Aniket Saha
- 21
- 1
- 4
2
votes
2 answers
Memcache connects but doesn't respond to any command
Setup:
Apache; PHP 5.2.9; libevent (for memcached it's required) version 1.3; memcached server version 1.2.2 (tried 1.4.5, 1.4.0, now downgraded to 1.2.2, no difference); memcached php pecl module version 2.2.6.
Problem:
Similar to unresolved…

glum
- 121
- 1
- 5
2
votes
1 answer
Unable to start Kafka Server using SASL_PLAINTEXT authentication
I'm trying to run Apache Kafka on Windows Server 2016 with the following…

Fernando
- 614
- 1
- 9
- 20
2
votes
1 answer
How to implement SASL/EXTERNAL for OpenLDAP client over IPC on Golang?
I'm currently trying to implement SASL/EXTERNAL auth for OpenLDAP client written in Golang.
By other words, I want to load the following data:
ldapsearch -Y EXTERNAL -H ldapi:// -s base -b 'olcDatabase={1}mdb,cn=config' olcSyncRepl
I'm using…

regeda
- 21
- 1
2
votes
1 answer
How to create a Kafka topics on a SASL enabled Zookeeper?
We have a kafka cluster and are in the process of locking down the specific nodes based on these standards: https://docs.hortonworks.com/HDPDocuments/HDP3/HDP-3.1.0/zookeeper-acls/content/zookeeper_acls_best_practices_kafka.html
Once we lock down…

franzke
- 517
- 1
- 6
- 18