[
https://issues.apache.org/jira/browse/KAFKA-14369?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17780549#comment-17780549
]
Colin McCabe commented on KAFKA-14369:
--------------------------------------
Thanks [~dbove]. I agree that it would be helpful to have an example config
file with non-PLAINTEXT auth. If you have one, please post it here.
> Docs - KRAFT controller authentication example
> ----------------------------------------------
>
> Key: KAFKA-14369
> URL: https://issues.apache.org/jira/browse/KAFKA-14369
> Project: Kafka
> Issue Type: Bug
> Components: docs
> Affects Versions: 3.3.1
> Reporter: Domenic Bove
> Priority: Minor
> Labels: kraft
>
> The [Kafka Listener docs
> |https://kafka.apache.org/documentation/#listener_configuration]mention how
> to handle kafka protocols (other than PLAINTEXT) on the KRAFT controller
> listener, but it is not a working example and I found that I was missing this
> property:
> {code:java}
> sasl.mechanism.controller.protocol {code}
> when attempting to do SASL_PLAINTEXT on the controller listener. I see that
> property here:
> [https://kafka.apache.org/documentation/#brokerconfigs_sasl.mechanism.controller.protocol]
> But nowhere else.
> I wonder if a complete working example would be better. Here are my working
> configs for sasl plain on the controller
> {code:java}
> process.roles=controller
> listeners=CONTROLLER://:9093
> node.id=1
> controller.quorum.voters=1@localhost:9093
> controller.listener.names=CONTROLLER
> listener.security.protocol.map=CONTROLLER:SASL_PLAINTEXT
> listener.name.controller.plain.sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule
> required username="admin" password="admin-secret" user_admin="admin-secret"
> user_alice="alice-secret";
> listener.name.controller.sasl.enabled.mechanisms=PLAIN
> listener.name.controller.sasl.mechanism=PLAIN
> sasl.enabled.mechanisms=PLAIN
> sasl.mechanism.controller.protocol=PLAIN{code}
> Or maybe just a callout of that property in the existing docs
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
