Hi all, I think Kafka should avoid printing SaslServerAuthenticator.credentialCache information through Log. I noticed that it might happen at lines 162 and 181 in SaslServerAuthentication. More specifically, through these lines:
*LOG.debug("Creating SaslServer for {} with mechanism {}", kerberosName, saslMechanism);* *LOG.warn("Cannot add private credential to subject; clients authentication may fail", ex);* Perhaps sanitizing the information being printed would solve this issue. Best regards, Rodrigo Andrade