[
https://issues.apache.org/jira/browse/KAFKA-6772?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16437176#comment-16437176
]
ASF GitHub Bot commented on KAFKA-6772:
---------------------------------------
rajinisivaram opened a new pull request #4867: KAFKA-6772: Load credentials
from ZK before accepting connections
URL: https://github.com/apache/kafka/pull/4867
Reorder startup sequence in `KafkaServer` to ensure that credentials are
loaded from ZK into cache before socket connections are accepted.
### Committer Checklist (excluded from commit message)
- [ ] Verify design and implementation
- [ ] Verify test coverage and CI build status
- [ ] Verify documentation (including upgrade notes)
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
> Broker should load credentials from ZK before requests are allowed
> ------------------------------------------------------------------
>
> Key: KAFKA-6772
> URL: https://issues.apache.org/jira/browse/KAFKA-6772
> Project: Kafka
> Issue Type: Improvement
> Affects Versions: 1.0.0, 1.1.0, 1.0.1
> Reporter: Ismael Juma
> Assignee: Rajini Sivaram
> Priority: Major
> Fix For: 1.0.2, 1.2.0, 1.1.1
>
>
> It is currently possible for clients to get an AuthenticationException during
> start-up if the brokers have not yet loaded credentials from ZK. This
> definitely affects SCRAM, but it may also affect delegation tokens.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
