Does burrow support Kafka broker secured with Kerberos running SASL_PLAINTEXT listeners

[madhurkumar]

For Kafka cluster secured with Kerberos running SASL_PLAINTEXT listeners. does Burrow support keytab based authentication for connecting to Zookeeper and Kafka?

[ogg1e]

+1 for this. Has anyone attempted to get this working?

[jamesaharrisonuk]

Hello,
It would be great :) if someone could answer this question.

Thanks

[toddpalino]

#228 is asking for the same thing. I'll look at adding the configs in the 1.0 rewrite.

[toddpalino]

Resolved by 1.0 rewrite

[icearn]

@toddpalino was this problem solved? I think it's a bit different from SASL_SSL support. this question in particular is for kerberos support on SASL. I don't see our configuration option for the keytab file?

[icearn]

I think currently Burrow only support SASL mechanism PLAIN login, not GSSAPI (which is kerberos).

A work around is to give Burrow user a separate SASL auth; I think this may help:

https://docs.confluent.io/3.0.0/kafka/sasl.html#enabling-multiple-sasl-mechanisms-in-a-broker

[jrevillard]

@toddpalino, @icearn, I would also like to use a keytab to connect to our broker which uses SASL_SSL.
Would it be possible to use this option ?

[jrevillard]

@toddpalino, should I open a new issue for that ?