Thanks Rajini. This is a good improvement. One question, the proposal states:
Producer waitForMetadata and consumer ensureCoordinatorReady will be > updated to throw AuthenticationFailedException if connections to all > available brokers fail authentication. Can you elaborate on the reason why we would treat authentication failures differently from authorization failures? It would be good to understand under which scenario it would be beneficial to try all the brokers (it seems that the proposal also suggests blacking out brokers permanently if we fail authentication, so that could also eventually cause issues). Ismael On Thu, May 4, 2017 at 12:37 PM, Rajini Sivaram <rajinisiva...@gmail.com> wrote: > Hi all, > > I have created a KIP to improve diagnostics for SASL authentication > failures and reduce retries and blocking when authentication fails: > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-152+-+ > Improve+diagnostics+for+SASL+authentication+failures > > Comments and suggestions are welcome. > > Thank you... > > Regards, > > Rajini >