Hi Gokul.  This would require a KIP to discuss.  If you have a compelling need 
to change this then I encourage you to create a KIP and start the discussion.  
I’m not aware of anything specific that would prevent the change, but I will 
say that my gut instinct says it wouldn’t be a good idea without a truly 
compelling justification.

Ron

> On Sep 28, 2020, at 8:34 AM, Gokul Ramanan Subramanian <gokul24...@gmail.com> 
> wrote:
> 
> Thanks Ron.
> 
> Does this mean that it would be safe to remove the "KafkaPrincipal has not
> changed after reauth" check in a future version? Or do you think there are
> portions of the code that work under the assumption that this check exists?
> 
>> On Sun, Sep 27, 2020 at 12:07 AM Ron Dagostino <rndg...@gmail.com> wrote:
>> 
>> Hi Gokul.  I looked back at the discussion thread, and it appears it was an
>> arbitrary decision.
>> 
>> 
>> https://lists.apache.org/thread.html/45c09f226386c0b1dc5f9b36e112882a20414d5900f8d778969e633e%40%3Cdev.kafka.apache.org%3E
>> 
>> Ron
>> 
>> On Thu, Sep 24, 2020 at 11:03 AM Gokul Ramanan Subramanian <
>> gokul24...@gmail.com> wrote:
>> 
>>> Hi.
>>> 
>>> I was looking through Kafka code and found that SASL KafkaPrincipals are
>>> not supposed to change upon reauthentication, and if they do, the broker
>>> will kill the TCP connection.
>>> 
>>> What is the reasoning behind this limitation?
>>> 
>>> Thanks.
>>> 
>> 

Reply via email to