I've been testing out the native docker image and I notice that it seems to not 
work with the most simple authentication scheme - sasl plain.

KAFKA-19584<https://issues.apache.org/jira/browse/KAFKA-19584> from August 2025 
describes the issue I'm seeing - the SaslServerAuthenticator fails with 
"java.lang.UnsupportedOperationException: Unable to find suitable Subject#doAs 
or Subject#callAs implementation at".

I am sending the mail to check if people are aware of the issue - to me it 
sounds like a potential blocker for the native image that is advertised as 
suitable for non-prod scenarios and testing — almost all non-prod scenarios 
ought to be secured, and it seems like the image has a critical bug in that 
path.


Best,
Stan

Reply via email to