Hi It seems you want to configure ConsumeKafka / ConsumeKafkaRecord for SASL_SSL PLAIN. It is possible but not straightforward. The "Kerberos Service Name" cannot be empty but its content does not matter since it will not be used in this case. The trick is to specify the 2 additional properties sasl.jaas.config and sasl.mechanism, exactly like you did.
You must create a Controller Service of type StandardSSLContextService, see https://nifi.apache.org/docs/nifi-docs/components/org.apache.nifi/nifi-ssl-context-service-nar/1.5.0/org.apache.nifi.ssl.StandardSSLContextService/index.html And reference the Truststore so that Nifi can securely connect to your Kafka platform. Gruss Chris -----Original Message----- From: dkommineni <[email protected]> Sent: Wednesday, October 9, 2019 21:35 To: [email protected] Subject: Apache Nifi with IBM Event Streams I am trying to use Apache Nifi docker image "apache/nifi" to connect to Kafka in IBM Event Streams platform. I am trying to use "SASL_SSL" as the security protocol. My questions are: What is the "Kerberos Service Name" to be used? If some configuration required how and where to setup? What is the "SSL Context Service" and how do I create one? I tried adding additional properties like "sasl.mechanism=PLAIN"and "sasl.jaas.config" as org.apache.kafka.common.security.plain.PlainLoginModule required username="XxxxXXxxx password="XxxXxxxXXxxxxx"; -- Sent from: http://apache-nifi-users-list.2361937.n4.nabble.com/
