sglass520 edited a comment on pull request #11443:
URL: https://github.com/apache/kafka/pull/11443#issuecomment-957103498


   @junrao I can confirm this issue running Kafka in WildFly. The code in 
createSaslClient() is calling Java Security API to get the factory for 
specified mechanism. However, the API will simply return the first security 
provider in the list of priority which implements the mechanism. This will 
always return an unsupported WildFly security provider as these are registered 
earlier and therefore higher priority.
   
   @shankarb27 code is correct in that kafka should explicitly define the 
factory instead of using Java security calls. This change should be replicated 
for every mechanism. Alternatively, allow user option to define the priority of 
the provider i.e kafka implementations of initialization() function should use 
Security insertProviderAt with user-defined index instead of addProvider which 
adds provider auto to lowest priority.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to