Thanks Rajini. This is a good improvement. One question, the proposal
states:

Producer waitForMetadata and consumer ensureCoordinatorReady will be
> updated to throw AuthenticationFailedException if connections to all
> available brokers fail authentication.


Can you elaborate on the reason why we would treat authentication failures
differently from authorization failures? It would be good to understand
under which scenario it would be beneficial to try all the brokers (it
seems that the proposal also suggests blacking out brokers permanently if
we fail authentication, so that could also eventually cause issues).

Ismael


On Thu, May 4, 2017 at 12:37 PM, Rajini Sivaram <rajinisiva...@gmail.com>
wrote:

> Hi all,
>
> I have created a KIP to improve diagnostics for SASL authentication
> failures and reduce retries and blocking when authentication fails:
>
> https://cwiki.apache.org/confluence/display/KAFKA/KIP-152+-+
> Improve+diagnostics+for+SASL+authentication+failures
>
> Comments and suggestions are welcome.
>
> Thank you...
>
> Regards,
>
> Rajini
>

Reply via email to