Ismael Juma created KAFKA-3166: ---------------------------------- Summary: Disable SSL client authentication for SASL_SSL security protocol Key: KAFKA-3166 URL: https://issues.apache.org/jira/browse/KAFKA-3166 Project: Kafka Issue Type: Improvement Components: security Affects Versions: 0.9.0.0 Reporter: Ismael Juma
A useful scenario is for a broker to require clients to authenticate either via SSL or via SASL (with SASL_SSL security protocol). With the current code, this is not possible to achieve. If we set `ssl.client.auth` to `required`, then it will be required for both SSL and SASL. I suggest we hardcode `ssl.client.auth` to `none` for the `SASL_SSL` case. -- This message was sent by Atlassian JIRA (v6.3.4#6332)