Generic Kafka Producer —> AWS MSK broker (Authentication?)

Solved177 viewsadl2099 AWS MSK kafka Producer
1
0 Comments

Hello Dojo,

We are pointing a Generic Kafka Producer towards an AWS MSK cluster,
selecting SASL as the security protocol,

but the brokers seem to allow authentication only via SCRAM-SHA-512:
is this supported by any version of the Generic Kafka Producer?

We're using version 1.0.1.7 of the connector - error logs would suggest that the element is using SASL PLAIN - is there any way to specify SCRAM-SHA-512 instead?

Thanks

Alberto De Luca [DevOps Enabler] Selected answer as best

1 Answer

1
476 1 Comment

Hi

For SASL authentication, Kafka supports mechanisms such as GSSAPI, PLAIN, SCRAM-SHA-256, SCRAM-SHA-512, and OAUTHBEARER.

In the current connector version, SASL authentication uses the PLAIN mechanism with username and password. To support other mechanisms, a new feature request would be needed to add a configurable parameter for selecting the SASL mechanism.

Regards,

Alberto De Luca [DevOps Enabler] Selected answer as best
Alberto De Luca [DevOps Enabler] commented

Thanks Tiago – indeed we had found the same with some help from the support squad, but had forgotten to update the question here – marking as solved now.