Hi all,

I think Kafka should avoid printing
 SaslServerAuthenticator.credentialCache information through Log. I noticed
that it might happen at lines 162 and 181 in SaslServerAuthentication. More
specifically, through these lines:

*LOG.debug("Creating SaslServer for {} with mechanism {}", kerberosName,
saslMechanism);*

*LOG.warn("Cannot add private credential to subject; clients authentication
may fail", ex);*

Perhaps sanitizing the information being printed would solve this issue.

Best regards,
Rodrigo Andrade

Reply via email to