[KAFKA-6426] Kafka SASL/SCRAM authentication does not fail for incorrect username or password.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Cannot Reproduce
• Affects Version/s: 0.10.2.1
• Environment: Ubuntu 16.04, JDK 1.8, Kafka_2.10-0.10.2.1
• Assignee: Unassigned
• Reporter: Menaka Madushanka
• Created: 05/Jan/18 09:55
• Updated: 17/May/18 18:14
• Resolved: 17/May/18 18:14

Description

Hi,

I configured Kafka 0.10.2.1 for SASL/SCRAM by following the documentation [1].
But it does work when I use incorrect username or password in the client as well.

I have attached the server.properties, consumer.properties, producer.properties, jass config files for broker and client.

Also, in my producer, I have set
props.put("sasl.mechanism", "SCRAM-SHA-256");

but when running, it shows,
kafka.utils.VerifiableProperties - Property sasl.mechanism is not valid

[1] https://kafka.apache.org/documentation/#security_sasl_scram

Thanks and Regards,
Menaka