Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-26919

Zabbix Kafka Connector SASL auth only works with SASL_PLAIN

XMLWordPrintable

    • Icon: Patch request Patch request
    • Resolution: Unresolved
    • Icon: Trivial Trivial
    • None
    • None
    • Tools (J)
    • Support backlog

      kafka-connector is only able to connect to kafka brokers using SASL_PLAIN when using SASL auth with a username and password.

      This patch allows the kafka-connector to authenticate to kafka brokers using SCRAM-SHA-256 and SCRAM-SHA-512 SASL mechanisms.

      Steps to reproduce:

      1. Compile kafka-connector for Linux amd64
      2. Configure kafka broker using SASL username & password with Kafka.EnableTLS set to true
      3. Start kafka-connector and attempt to connect to a kafka broker which requires auth with SCRAM-SHA-256 or SCRAM-SHA-512

      Result:
      kafka-connector immediately exits with the below error:

      kafka-connector [173896]: ERROR: failed to initialize kafka producer: Failed to create new kafka producer: async producer init failed: kafka: client has run out of available brokers to talk to: kafka server: SASL Authentication failed: Authentication failed: Invalid username or password.
      

      The username/password are correct despite the error message provided. The logs on the kafka end will also generate similar invalid username/password error messages

       

       

            zabbix.dev Zabbix Development Team
            jimmy.pan Jimmy Pan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: