Re: How does kafka consumer behave when consumer poll timeout has expired?

2023-11-03 Thread Debraj Manna
Right now sometime I am observing that after the above log is printed on both the consumer instances then the machine on which the consumer instances are running stops consuming any new messages. My understanding was that after the above log is printed then the consumer instances will be removed fr

NO SCRAM-SASL AUTHENTICATION BETWEEN KRAFT CONTROL NODES

2023-11-03 Thread Daniele Carminati
NO SCRAM-SASL AUTHENTICATION BETWEEN KRAFT CONTROL NODES Hi there. I successfully build a 5 node Kafka Raft cluster: 3) controller only role node kraft-ct-1,kraft-ct-2,kraft-ct-3 2) broker only node kraft-bro-1,kraft-bro-2 i setup ssl authentication : controller -> controller broker -> contro

Re: NO SCRAM-SASL AUTHENTICATION BETWEEN KRAFT CONTROL NODES

2023-11-03 Thread Jesus Cea
On 3/11/23 11:25, Daniele Carminati wrote: But, when i try to enable SCRAM/SASL on controller -> controller i get this error [2023-11-03 09:05:02,134] INFO [SocketServer listenerType=CONTROLLER, nodeId=1] Failed authentication with /192.168.1.34 (channelId=192.168.1.33:9093-192.168.1.34:56006-130

Re: NO SCRAM-SASL AUTHENTICATION BETWEEN KRAFT CONTROL NODES

2023-11-03 Thread Jesus Cea
What version of Kafka are you using? I am testing 3.6.0. Do you have an account to open an issue at https://issues.apache.org/jira/projects/KAFKA/issues/? Thanks -- Jesús Cea Avión _/_/ _/_/_/_/_/_/ j...@jcea.es - https://www.jcea.es/_/_/_/_/ _/_/

Re: NO SCRAM-SASL AUTHENTICATION BETWEEN KRAFT CONTROL NODES

2023-11-03 Thread Richard Bosch
I haven't worked with KRaft controllers in SASL mode yet, but could I think that the early.start.listeners might help here. ( https://kafka.apache.org/documentation/#brokerconfigs_early.start.listeners) It was meant to indicate that these listeners are depending on data in the cluster itself for bo

Re: NO SCRAM-SASL AUTHENTICATION BETWEEN KRAFT CONTROL NODES

2023-11-03 Thread Daniele Carminati
YesX.509 client certificates kafka_2.13-3.6.0.tgz Il giorno ven 3 nov 2023 alle ore 16:04 Jesus Cea ha scritto: > On 3/11/23 11:25, Daniele Carminati wrote: > > But, when i try to enable SCRAM/SASL on controller -> controller > > i get this error > > [2023-11-03 09:05:02,134] INFO [SocketSer

Re: Java 1.8 and TLSv1.3

2023-11-03 Thread Edoardo Comar
Andreas, do you mean that even if you configure your Java client running on Java8 with ssl.enabled.protocols=TLSv1.3 you can't connect to a Kafka broker using TLS1.3 ? On Sat, 28 Oct 2023 at 01:03, Ismael Juma wrote: > > Hi Andreas, > > The TLS code has run into changes in behavior across differ

Re: NO SCRAM-SASL AUTHENTICATION BETWEEN KRAFT CONTROL NODES

2023-11-03 Thread Jesus Cea
On 3/11/23 16:45, Richard Bosch wrote: I haven't worked with KRaft controllers in SASL mode yet, but could I think that the early.start.listeners might help here. ( https://kafka.apache.org/documentation/#brokerconfigs_early.start.listeners) It was meant to indicate that these listeners are depen