Ismael Juma created KAFKA-3166:
----------------------------------

             Summary: Disable SSL client authentication for SASL_SSL security 
protocol
                 Key: KAFKA-3166
                 URL: https://issues.apache.org/jira/browse/KAFKA-3166
             Project: Kafka
          Issue Type: Improvement
          Components: security
    Affects Versions: 0.9.0.0
            Reporter: Ismael Juma


A useful scenario is for a broker to require clients to authenticate either via 
SSL or via SASL (with SASL_SSL security protocol). With the current code, this 
is not possible to achieve. If we set `ssl.client.auth` to `required`, then it 
will be required for both SSL and SASL.

I suggest we hardcode `ssl.client.auth` to `none` for the `SASL_SSL` case.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to