Hi Michal,
There is no authentication in the PLAINTEXT port, but authorization still
happens. And the user will always be `KafkaPrincipal.ANONYMOUS` for that
case.
Ismael
On Thu, May 12, 2016 at 11:18 AM, Michał Kabocik <michal.kabo...@gmail.com>
wrote:
> Dears,
>
>
>
> I have a three node cluster of Kafka 0.9 with two listeners configured :
> PLAINTEXT on 9092 and SASL_PLAINTEXT on 9094.
>
> I successfully configured Kerberos + ACL and I’m able to produce messages
> (using kafka_console_producer) to port 9094.
>
>
>
> But when I try to produce to PLAINTEXT port without Kerberos configs on
> kafka_console_producer side, I receive an error:
>
>
>
> [2016-05-12 12:14:43,907] WARN Error while fetching metadata with
> correlation id 0 : {plain2=TOPIC_AUTHORIZATION_FAILED}
> (org.apache.kafka.clients.NetworkClient)
>
> [2016-05-12 12:14:43,908] ERROR Error when sending message to topic plain2
> with key: null, value: 3 bytes with error: Not authorized to access topics:
> [plain2] (org.apache.kafka.clients.producer.internals.ErrorLoggingCallback)
>
>
>
> Why is that happen? I thought that if I send messages to Plaintext port,
> Kerberos/ACL authentication is omitted.
>
> I will appreciate your help.
>
>
>
> Kind regards,
>
> --
> Michał Kabocik
>
