I haven't worked with KRaft controllers in SASL mode yet, but could I think that the early.start.listeners might help here. ( https://kafka.apache.org/documentation/#brokerconfigs_early.start.listeners) It was meant to indicate that these listeners are depending on data in the cluster itself for bootstrapping.
Can you test specifying the controller in that setting? early.start.listeners=CONTROLLER Kind regards, Richard Bosch Developer Advocate Axual BV https://axual.com/ On Fri, Nov 3, 2023 at 4:03 PM Jesus Cea <j...@jcea.es> wrote: > On 3/11/23 11:25, Daniele Carminati wrote: > > But, when i try to enable SCRAM/SASL on controller -> controller > > i get this error > > [2023-11-03 09:05:02,134] INFO [SocketServer listenerType=CONTROLLER, > > nodeId=1] Failed authentication with /192.168.1.34 > > (channelId=192.168.1.33:9093-192.168.1.34:56006-1304) (Authentication > > failed during authentication due to invalid credentials with SASL > mechanism > > SCRAM-SHA-256) (org.apache.kafka.common.network.Selector) > > > > > > NON WORKING KAFKA INTER CONTROLLER SCRAM CONFIGURATIONS > > I have the very same issue, as documented in an email to the mailing > list at October, 27th. > > > WORKING CONFIGURATIONS > > > > “kafka controller only node” > > process.roles=controller > > node.id=1 > > controller.quorum.voters=1@kraft-ct-1:9093,2@kraft-ct-2 > :9093,3@kraft-ct-3 > > :9093 > > listeners=CONTROLLER://kraft-ct-1:9093 > > controller.listener.names=CONTROLLER > > > listener.security.protocol.map=CONTROLLER:SSL,SSL:SSL,SASL_PLAINTEXT:SASL_PLAINTEXT,SASL_SSL:SASL_SSL > > listener.name.controller.ssl.client.auth=required > > I guess you are using here broker's X.509 client certificates for > authentication (to the controllers) and that works fine? > > -- > Jesús Cea Avión _/_/ _/_/_/ _/_/_/ > j...@jcea.es - https://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/ > Twitter: @jcea _/_/ _/_/ _/_/_/_/_/ > jabber / xmpp:j...@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/ > "Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/ > "My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/ > "El amor es poner tu felicidad en la felicidad de otro" - Leibniz >
