[ https://issues.apache.org/jira/browse/KAFKA-5993?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16190808#comment-16190808 ]
Stephane Maarek commented on KAFKA-5993: ---------------------------------------- [~ijuma] Indeed it does support security settings. The log still shows that WARN, which is what was misleading on my end. See full log here: {code:java} 15:42:18.548 [main] INFO org.apache.kafka.clients.admin.AdminClientConfig - AdminClientConfig values: bootstrap.servers = [localhost:9092] client.id = connections.max.idle.ms = 300000 metadata.max.age.ms = 300000 metric.reporters = [] metrics.num.samples = 2 metrics.recording.level = INFO metrics.sample.window.ms = 30000 receive.buffer.bytes = 65536 reconnect.backoff.max.ms = 1000 reconnect.backoff.ms = 50 request.timeout.ms = 120000 retries = 5 retry.backoff.ms = 100 sasl.jaas.config = [hidden] sasl.kerberos.kinit.cmd = /usr/bin/kinit sasl.kerberos.min.time.before.relogin = 60000 sasl.kerberos.service.name = null sasl.kerberos.ticket.renew.jitter = 0.05 sasl.kerberos.ticket.renew.window.factor = 0.8 sasl.mechanism = GSSAPI security.protocol = PLAINTEXT send.buffer.bytes = 131072 ssl.cipher.suites = null ssl.enabled.protocols = [TLSv1.2, TLSv1.1, TLSv1] ssl.endpoint.identification.algorithm = null ssl.key.password = null ssl.keymanager.algorithm = SunX509 ssl.keystore.location = null ssl.keystore.password = null ssl.keystore.type = JKS ssl.protocol = TLS ssl.provider = null ssl.secure.random.implementation = null ssl.trustmanager.algorithm = PKIX ssl.truststore.location = null ssl.truststore.password = null ssl.truststore.type = JKS 15:42:18.548 [main] DEBUG org.apache.kafka.common.metrics.Metrics - Added sensor with name connections-closed: 15:42:18.548 [main] DEBUG org.apache.kafka.common.metrics.Metrics - Added sensor with name connections-created: 15:42:18.548 [main] DEBUG org.apache.kafka.common.metrics.Metrics - Added sensor with name bytes-sent-received: 15:42:18.548 [main] DEBUG org.apache.kafka.common.metrics.Metrics - Added sensor with name bytes-sent: 15:42:18.549 [main] DEBUG org.apache.kafka.common.metrics.Metrics - Added sensor with name bytes-received: 15:42:18.549 [main] DEBUG org.apache.kafka.common.metrics.Metrics - Added sensor with name select-time: 15:42:18.549 [main] DEBUG org.apache.kafka.common.metrics.Metrics - Added sensor with name io-time: 15:42:18.549 [main] DEBUG org.apache.kafka.clients.Metadata - Updated cluster metadata version 1 to Cluster(id = null, nodes = [localhost:9092 (id: -1 rack: null)], partitions = []) 15:42:18.550 [main] WARN org.apache.kafka.clients.admin.AdminClientConfig - The configuration 'sasl.jaas.config' was supplied but isn't a known config. 15:42:18.550 [main] INFO org.apache.kafka.common.utils.AppInfoParser - Kafka version : 0.11.0.1 15:42:18.550 [main] INFO org.apache.kafka.common.utils.AppInfoParser - Kafka commitId : c2a0d5f9b1f45bf5 {code} My code to generate my admin client is: {code:java} public static AdminClient getAdminClient() { Properties adminProps = new Properties(); adminProps.put(AdminClientConfig.BOOTSTRAP_SERVERS_CONFIG, Optional.ofNullable(System.getenv("KAFKA_BOOTSTRAP_SERVERS")).orElse("localhost:9092")); adminProps.put(AdminClientConfig.SECURITY_PROTOCOL_CONFIG, Optional.ofNullable(System.getenv("SECURITY_PROTOCOL")).orElse("PLAINTEXT")); adminProps.put(SaslConfigs.SASL_JAAS_CONFIG, Optional.ofNullable(System.getenv("SASL_JAAS_CONFIG")).orElse("")); return AdminClient.create(adminProps); } {code} If you feel that WARN is okay, we can close the JIRA, otherwise maybe we should rename the JIRA and address the WARN? > Kafka AdminClient does not support standard security settings > ------------------------------------------------------------- > > Key: KAFKA-5993 > URL: https://issues.apache.org/jira/browse/KAFKA-5993 > Project: Kafka > Issue Type: Bug > Affects Versions: 0.11.0.1 > Reporter: Stephane Maarek > > Kafka Admin Client does not support basic security configurations, such as > "sasl.jaas.config". > Therefore it makes it impossible to use against a secure cluster > ``` > 14:12:12.948 [main] WARN org.apache.kafka.clients.admin.AdminClientConfig - > The configuration 'sasl.jaas.config' was supplied but isn't a known config. > ``` -- This message was sent by Atlassian JIRA (v6.4.14#64029)