[
https://issues.apache.org/jira/browse/KAFKA-3166?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15123323#comment-15123323
]
ASF GitHub Bot commented on KAFKA-3166:
---------------------------------------
Github user asfgit closed the pull request at:
https://github.com/apache/kafka/pull/827
> Disable SSL client authentication for SASL_SSL security protocol
> ----------------------------------------------------------------
>
> Key: KAFKA-3166
> URL: https://issues.apache.org/jira/browse/KAFKA-3166
> Project: Kafka
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.9.0.0
> Reporter: Ismael Juma
> Assignee: Ismael Juma
>
> A useful scenario is for a broker to require clients to authenticate either
> via SSL or via SASL (with SASL_SSL security protocol). With the current code,
> this is not possible to achieve. If we set `ssl.client.auth` to `required`,
> then it will be required for both SSL and SASL.
> I suggest we hardcode `ssl.client.auth` to `none` for the `SASL_SSL` case.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
